Aller au contenu
Se connecter
6.8 Moyenne

CVE-2026-93689 WinFsp through 2.2.26215 contains a null pointer dereference vulnerability in the kernel driver's Fast I/O device…

Description

WinFsp through 2.2.26215 contains a null pointer dereference vulnerability in the kernel driver's Fast I/O device control handler that fails to validate the volume context before use. An unprivileged local user can trigger a denial of service by opening the WinFsp control device and issuing FSP_IOCTL_TRANSACT requests, causing a system crash.

Produits et versions touchés

Produit Versions touchées Corrigé en
WinFSP 2.2 premières → 2.2.26215 Pas de correctif indiqué

Autres CVE de WinFSP

Les 3 CVE de WinFSP →
CVE-2026-7162 Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access… 7.8 Élevée CVE-2026-3006 Successful exploitation of the race condition vulnerability could allow an attacker to trigger a kernel heap overflow,… 7.0 Élevée
Suivre cette CVE