CVE-2026-83784
HighCVSS 8.8Summary
An absolute path traversal vulnerability in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
Risk Assessment
An attacker with valid credentials could exploit this remotely to gain higher privileges, potentially leading to compromise of organizational data and resources.
Recommendation
Immediately apply available Microsoft security updates for Windows EFS and restrict network access to EFS services for unauthorized users.
Other vulnerabilities in Windows Encrypting File System (EFS)
See all- CVE-2026-85791High
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-83759High
Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.
- CVE-2026-69841High
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-69794Medium
A buffer over-read vulnerability in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS