SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-83999

HIGH · CVSS 7 EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The vulnerability in the Windows Resilient File System (ReFS) Deduplication Service allows authorized users to exploit improper link resolution before file access, potentially leading to local privilege escalation. This could enable attackers to gain elevated permissions on affected systems, compromising their integrity and security. Organizations using Windows systems, particularly those leveraging ReFS, should prioritize patching to mitigate this high-severity risk.

CVE
CVE-2026-83999
Severity
HIGH
CVSS
7
EPSS
0.21%
Windows

Original NVD Description

Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.

Related CVEs

Other vulnerabilities affecting the same vendor(s)