CVE-2026-85821
MediumCVSS 6.5Summary
An out-of-bounds read in the Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
Risk Assessment
A local attacker could exploit faulty memory reads to leak kernel data, potentially compromising information confidentiality.
Recommendation
Install Microsoft security updates for the UDFS driver and avoid mounting untrusted UDF media.
Other vulnerabilities in Windows Universal Disk Format File System Driver (UDFS)
See all- CVE-2026-85909Medium
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. The vulnerability may result in leakage of memory data.
- CVE-2026-102218High
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-102215High
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS