CVE-2026-69841 - Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

Back Back to CVE browser

HIGH

Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

Published Sep 8, 2026

7.8

HIGH

CVSS 3.1

EPSS 0.33%

Description

Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

Affected products

Vendor Microsoft Product Windows 10 Version 1607 Default
n/a
- Version
  10.0.14393.0
  Status
  affected
  Constraints
  <10.0.14393.9512
Vendor Microsoft Product Windows 10 Version 1809 Default
n/a
- Version
  10.0.17763.0
  Status
  affected
  Constraints
  <10.0.17763.9245
Vendor Microsoft Product Windows 10 Version 21H2 Default
n/a
- Version
  10.0.19044.0
  Status
  affected
  Constraints
  <10.0.19044.7725
Vendor Microsoft Product Windows 10 Version 22H2 Default
n/a
- Version
  10.0.19045.0
  Status
  affected
  Constraints
  <10.0.19045.7725
Vendor Microsoft Product Windows 11 Version 23H2 Default
n/a
- Version
  10.0.22631.0
  Status
  affected
  Constraints
  <10.0.22631.7582
Vendor Microsoft Product Windows 11 Version 24H2 Default
n/a
- Version
  10.0.26100.0
  Status
  affected
  Constraints
  <10.0.26100.9445
Vendor Microsoft Product Windows 11 Version 25H2 Default
n/a
- Version
  10.0.26200.0
  Status
  affected
  Constraints
  <10.0.26200.9445
Vendor Microsoft Product Windows 11 version 23H2 Default
n/a
- Version
  10.0.22631.0
  Status
  affected
  Constraints
  <10.0.22631.7582
Vendor Microsoft Product Windows 11 version 26H1 Default
n/a
- Version
  10.0.28000.0
  Status
  affected
  Constraints
  <10.0.28000.2954
Vendor Microsoft Product Windows Server 2012 Default
n/a
- Version
  6.2.9200.0
  Status
  affected
  Constraints
  <6.2.9200.26349
Vendor Microsoft Product Windows Server 2012 (Server Core installation) Default
n/a
- Version
  6.2.9200.0
  Status
  affected
  Constraints
  <6.2.9200.26349
Vendor Microsoft Product Windows Server 2012 R2 Default
n/a
- Version
  6.3.9600.0
  Status
  affected
  Constraints
  <6.3.9600.23398
Vendor Microsoft Product Windows Server 2012 R2 (Server Core installation) Default
n/a
- Version
  6.3.9600.0
  Status
  affected
  Constraints
  <6.3.9600.23398
Vendor Microsoft Product Windows Server 2016 Default
n/a
- Version
  10.0.14393.0
  Status
  affected
  Constraints
  <10.0.14393.9512
Vendor Microsoft Product Windows Server 2016 (Server Core installation) Default
n/a
- Version
  10.0.14393.0
  Status
  affected
  Constraints
  <10.0.14393.9512
Vendor Microsoft Product Windows Server 2019 Default
n/a
- Version
  10.0.17763.0
  Status
  affected
  Constraints
  <10.0.17763.9245
Vendor Microsoft Product Windows Server 2019 (Server Core installation) Default
n/a
- Version
  10.0.17763.0
  Status
  affected
  Constraints
  <10.0.17763.9245
Vendor Microsoft Product Windows Server 2022 Default
n/a
- Version
  10.0.20348.0
  Status
  affected
  Constraints
  <10.0.20348.5622
Vendor Microsoft Product Windows Server 2025 Default
n/a
- Version
  10.0.26100.0
  Status
  affected
  Constraints
  <10.0.26100.33438
Vendor Microsoft Product Windows Server 2025 (Server Core installation) Default
n/a
- Version
  10.0.26100.0
  Status
  affected
  Constraints
  <10.0.26100.33438

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Windows 10 Version 1607

n/a

Version	Status	Constraints
10.0.14393.0	affected	<10.0.14393.9512

Microsoft

Windows 10 Version 1809

n/a

Version	Status	Constraints
10.0.17763.0	affected	<10.0.17763.9245

Microsoft

Windows 10 Version 21H2

n/a

Version	Status	Constraints
10.0.19044.0	affected	<10.0.19044.7725

Microsoft

Windows 10 Version 22H2

n/a

Version	Status	Constraints
10.0.19045.0	affected	<10.0.19045.7725

Microsoft

Windows 11 Version 23H2

n/a

Version	Status	Constraints
10.0.22631.0	affected	<10.0.22631.7582

Microsoft

Windows 11 Version 24H2

n/a

Version	Status	Constraints
10.0.26100.0	affected	<10.0.26100.9445

Microsoft

Windows 11 Version 25H2

n/a

Version	Status	Constraints
10.0.26200.0	affected	<10.0.26200.9445

Microsoft

Windows 11 version 23H2

n/a

Version	Status	Constraints
10.0.22631.0	affected	<10.0.22631.7582

Microsoft

Windows 11 version 26H1

n/a

Version	Status	Constraints
10.0.28000.0	affected	<10.0.28000.2954

Microsoft

Windows Server 2012

n/a

Version	Status	Constraints
6.2.9200.0	affected	<6.2.9200.26349

Microsoft

Windows Server 2012 (Server Core installation)

n/a

Version	Status	Constraints
6.2.9200.0	affected	<6.2.9200.26349

Microsoft

Windows Server 2012 R2

n/a

Version	Status	Constraints
6.3.9600.0	affected	<6.3.9600.23398

Microsoft

Windows Server 2012 R2 (Server Core installation)

n/a

Version	Status	Constraints
6.3.9600.0	affected	<6.3.9600.23398

Microsoft

Windows Server 2016

n/a

Version	Status	Constraints
10.0.14393.0	affected	<10.0.14393.9512

Microsoft

Windows Server 2016 (Server Core installation)

n/a

Version	Status	Constraints
10.0.14393.0	affected	<10.0.14393.9512

Microsoft

Windows Server 2019

n/a

Version	Status	Constraints
10.0.17763.0	affected	<10.0.17763.9245

Microsoft

Windows Server 2019 (Server Core installation)

n/a

Version	Status	Constraints
10.0.17763.0	affected	<10.0.17763.9245

Microsoft

Windows Server 2022

n/a

Version	Status	Constraints
10.0.20348.0	affected	<10.0.20348.5622

Microsoft

Windows Server 2025

n/a

Version	Status	Constraints
10.0.26100.0	affected	<10.0.26100.33438

Microsoft

Windows Server 2025 (Server Core installation)

n/a

Version	Status	Constraints
10.0.26100.0	affected	<10.0.26100.33438

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-122

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-73590
Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69841
vendor-advisorypatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-73590		Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69841		vendor-advisorypatchVendor Advisory