Executive brief
Windows Encrypting File System (EFS) is a Windows feature that protects sensitive files by encrypting them at rest. A heap-based buffer overflow vulnerability allows an authorized network user to execute code with elevated privileges, potentially gaining full system control and compromising all data on affected machines.
Technical details
A heap-based buffer overflow exists in the Windows Encrypting File System (EFS) component. The vulnerability requires network access and valid user credentials to trigger. An attacker with authenticated network access can send a specially crafted request that overflows a heap buffer, allowing arbitrary code execution with elevated privileges. This can lead to complete system compromise. Microsoft has released patches through the security update guide.
Affected products
- Microsoft Windows <UNKNOWN>
Timeline
- 2026-09-08: disclosed