CVE-2026-85909
MediumCVSS 5.5Summary
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. The vulnerability may result in leakage of memory data.
Risk Assessment
An attacker with local access could read sensitive information from driver memory, potentially facilitating further attacks. The risk is limited to the local context.
Recommendation
Immediately install UDFS driver updates and avoid mounting untrusted UDF media.
Other vulnerabilities in Windows Universal Disk Format File System Driver (UDFS)
See all- CVE-2026-85821Medium
An out-of-bounds read in the Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
- CVE-2026-102218High
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-102215High
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS