Vulnerabilidades de WinFSP

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de WinFSP: 3 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2026-93689 Média · 5.5 CWE-476 18/09/2026

WinFsp through 2.2.26215 NULL Pointer Dereference via Fast I/O

WinFsp through 2.2.26215 contains a null pointer dereference vulnerability in the kernel driver's Fast I/O device control handler that fails to validate the volume context before use. An unprivileged local user can trigger a denial of service by opening the WinFsp control device and issuing FSP_IOCTL_TRANSACT requests, causing a system crash.

CVE-2026-7162 Alta · 7.8 CWE-190 13/07/2026

Integer Overflow or Wraparound em WinFSP

Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected software.

CVE-2026-3006 Alta · 7.0 CWE-362 27/04/2026

Race Condition Vulnerability

Successful exploitation of the race condition vulnerability could allow an attacker to trigger a kernel heap overflow, potentially leading to local privilege escalation and granting system-level access to the affected software.