CVSS 3.1
7.0 highCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2026-83999
High (7.0) in microsoft. EPSS 0.3% chance of exploitation in the next 30 days.
Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
- CWE
- CWE-59
- Published
- Modified
- Record from
- the NVD, synced
Affected
- microsoft:windows_11_24h2
- microsoft:windows_11_25h2
- microsoft:windows_11_26h1
- microsoft:windows_server_2025