Windows Resilient File System (ReFS) vulnerabilities
13 known CVE vulnerabilities in Windows Resilient File System (ReFS), translated and rated.
- CVE-2026-70048High
A heap-based buffer overflow exists in the Windows Resilient File System (ReFS). An authorized attacker can exploit this flaw to elevate privileges locally.
- CVE-2026-69617High
Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-50501High
In Windows Resilient File System (ReFS), a stack-based buffer overflow vulnerability allows an unauthorized attacker to execute code locally.
- CVE-2026-50492Medium
A heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code via a physical attack.
- CVE-2026-50441High
Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-50407High
A heap-based buffer overflow in the Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-50362High
A heap-based buffer overflow vulnerability in the Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.
- CVE-2026-50357High
A numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. The vulnerability stems from improper handling of numeric values during file system operations.
- CVE-2026-54109High
Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
- CVE-2026-50318High
A stack-based buffer overflow in the Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-49793High
A heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
- CVE-2026-49792High
A numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
- CVE-2025-62456High
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

