HIGH 7.0 NVD

CVE-2026-83999

Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to el

Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.

Affected Products

microsoft/windows_11_24h2
microsoft/windows_11_25h2
microsoft/windows_11_26h1
microsoft/windows_server_2025

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83999

Published: 2026-09-08 · Source: NVD · Feed updated: 2026-09-11

This high severity vulnerability with a CVSS score of 7.0 was published on 2026-09-08 via NVD. Affected: microsoft/windows_11_24h2, microsoft/windows_11_25h2, microsoft/windows_11_26h1 and 1 more.

vulnfeed aggregates 13138 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.