Integer Overflow Vulnerability in WinFsp Software by WinFsp
CVE-2026-7162

7.8HIGH

Key Information:

Vendor

Winfsp

Status
Winfsp
Vendor
CVE Published:
13 July 2026

What is CVE-2026-7162?

This vulnerability presents an integer overflow flaw that could be exploited by attackers to gain system-level access to WinFsp software. Such an exploitation could potentially lead to unauthorized actions and compromise the integrity of the affected systems. Users are advised to review and apply available patches to mitigate risks associated with this vulnerability.

Affected Version(s)

WinFsp 2.2.26112 and lower

References

https://www.csa.gov.sg/alerts-and-advisories/alerts/al-20...
https://github.com/winfsp/winfsp/releases/tag/v2.2B2

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tay Kiat Loong
uhg
.