CVE-2026-49790
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
A vulnerability in the Windows Universal Disk Format (UDFS) file system driver allows elevation of privilege. The flaw can be exploited locally by an authenticated attacker to gain higher privileges on the system.
Risk Assessment
The organization faces the risk of privilege escalation by a local user, potentially leading to full system compromise and access to sensitive data.
Recommendation
It is recommended to immediately apply the security update provided by the vendor as part of the monthly cumulative Windows update package.
Other vulnerabilities in Windows UDFS Driver
See all- CVE-2026-83713Medium
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
- CVE-2026-83513High
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-102205High
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-50498High
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability.
- CVE-2026-40409High
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability.
- CVE-2026-40404High
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability.
Original NVD description (English source)
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS