Microsoft Windows ReFS Deduplication Service Elevation of Privilege Vulnerability

Vulnerability

An elevation of privilege vulnerability has been identified in the Windows Resilient File System (ReFS) Deduplication Service. This vulnerability allows an attacker to exploit a race condition, potentially leading to unauthorized access to SYSTEM privileges.

Impact

Successful exploitation of this vulnerability could allow an attacker to gain elevated privileges, specifically SYSTEM rights.

Remediation

Users can apply the security update KB5066835 to address this vulnerability. This update is available through the Microsoft Update Catalog.

Added: Oct 14, 2025, 6:38 PM
Updated: Oct 14, 2025, 9:09 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
7.5
exploitability
4.3
remediation
7.7
relevance
0.7
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.