Veille CVE

Recherche « winfsp »

3 CVE

Critique 0 Élevée 2 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « winfsp » ✕
  1. CVE-2026-93689 5.5 Moyenne

    winfsp

    WinFsp through 2.2.26215 contains a null pointer dereference vulnerability in the kernel driver's Fast I/O device control handler that fails to validate the volume context before use. An unprivileged local user can trigger a denial of service by opening the WinFsp control device and issuing FSP_IOCTL_TRANSACT requests, causing a system crash.

  2. CVE-2026-7162 7.8 Élevée

    WinFsp

    Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected software.

  3. CVE-2026-3006 7.0 Élevée

    WinFSP · Red Hat Advanced Cluster Management for Kubernetes 2

    Successful exploitation of the race condition vulnerability could allow an attacker to trigger a kernel heap overflow, potentially leading to local privilege escalation and granting system-level access to the affected software.