CVE-2026-83999
HIGH
MEDIUM
Priority: 0.02
BB Relevance:
29/100
Published: 2026-09-08
Modified: 2026-11-10
First seen: 2026-10-30
Status: active
Attack Surface
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
High
PR:
Low
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.
Weakness Classification (1)
Affected Software (15)
References & Advisories (1)
vendor-advisory
patch