CVE-2026-40404 | Microsoft Windows up to Server 2025 Universal Disk Format File System Driver heap-based overflow

June 9, 2026 Yanac

A vulnerability was found in Microsoft Windows. It has been classified as critical. This affects an unknown part of the component Universal Disk Format File System Driver. Performing a manipulation results in heap-based buffer overflow.

This vulnerability is identified as CVE-2026-40404. The attack is only possible with local access. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More