CVE-2026-50501

Analyzed Analyzed - Analysis Complete

Stack-based Buffer Overflow in Windows ReFS

Publication date: 2026-07-14

Last updated on: 2026-07-22

Assigner: Microsoft Corporation

Description

Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-14

Last Modified

2026-07-22

Generated

2026-08-04

AI Q&A

2026-07-15

EPSS Evaluated

2026-08-02

NVD

CVE-2026-50501

EUVD

EUVD-2026-44109

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	windows_server_2025	to 10.0.26100.33158 (exc)
microsoft	windows_11_26h1	to 10.0.28000.2525 (exc)
microsoft	windows_11_26h1	to 10.0.28000.2525 (exc)
microsoft	windows_11_24h2	to 10.0.26100.8875 (exc)
microsoft	windows_11_24h2	to 10.0.26100.8875 (exc)
microsoft	windows_11_25h2	to 10.0.26200.8875 (exc)
microsoft	windows_11_25h2	to 10.0.26200.8875 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This is a stack-based buffer overflow in Windows Resilient File System (ReFS). It allows an unauthorized attacker to execute arbitrary code locally by exploiting a flaw in how ReFS handles certain operations.

Detection Guidance

This vulnerability is a local code execution flaw in Windows ReFS. Detection requires checking for ReFS driver versions and applying Microsoft's official security updates. Use PowerShell: Get-WindowsDriver -Online | Where-Object {$_.Driver -like "*ReFS*"} to verify driver versions. Check installed updates with Get-HotFix or Windows Update history.

Impact Analysis

An attacker could gain control of your system by exploiting this flaw, potentially leading to unauthorized access, data theft, or installation of malicious software. Since it requires local access, physical or network-based compromise is needed.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR (data protection) and HIPAA (health data security) requirements. Organizations may face fines or penalties if exploited due to inadequate safeguards.

Mitigation Strategies

Apply the latest security updates from Microsoft for the Resilient File System (ReFS) to patch the stack-based buffer overflow vulnerability.

Hi! I’m here to help you understand CVE-2026-50501. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70