CVE-2026-83991
5.5 mediumEPSS 0.3%
Medium (5.5) in microsoft. EPSS 0.3% chance of exploitation in the next 30 days.
Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally.
Severity
CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
- CWE
- CWE-306
- Published
- Modified
- Record from
- the NVD, synced
Affected
- microsoft:windows_10_1809
- microsoft:windows_10_21h2
- microsoft:windows_10_22h2
- microsoft:windows_11_23h2
- microsoft:windows_11_24h2
- microsoft:windows_11_25h2
- microsoft:windows_11_26h1
- microsoft:windows_server_2019
- microsoft:windows_server_2022
- microsoft:windows_server_2025
References
Check your stackJSON