Vulnerability

CVE-2026-62699

Descriptive record received from OpenCTI and minimised for consultation in the Intel portal.

Sharing: PUBLIC-OSINT
Confidence: 100
Source: The CVE Program
Updated: 26/09/2026 03:11

Description

Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.

STIX identifiervulnerability--280997b9-c109-5ceb-86d9-216e127c1a0d

First observation-

Last observation-

Known relationships25

Aliases and classifications

CWE-122CWE-190Heap-based Buffer OverflowInteger Overflow or Wraparound

Minimised technical details

No raw data

cvss vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
cvss severity: MEDIUM
cisa kev: False
cvss score: 6.8

Provenance

Public references

Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62699

EudorIA correlation

Intel catalogue

The vulnerability is also available in the EudorIA editorial catalogue.

Open EudorIA analysis

Presence in OpenCTI describes an intelligence correlation and does not, by itself, constitute evidence of compromise, legal attribution or operational guidance applicable without context verification.