{"id":"CVE-2026-70116","title":"Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack.","summary":"Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack.","severity":"medium","cvss":4.2,"cvssVector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-121"],"published":"2026-10-13","updated":"2026-10-13","sourceUpdated":"2026-10-13T22:18:07.180","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-70116","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70116","label":"secure@microsoft.com"}],"tags":["nvd"],"ingestedAt":"2026-10-13T19:43:29.005Z","slug":"CVE-2026-70116","body":"## Overview\n\nStack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":23,"depthScoreParts":{"impact":23.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}