PULSE
LIVE0signals / 24h
ES
FEED
vulnKEV agrega CVE-2026-85046 — Google / Chromium V8vulnKEV agrega CVE-2026-59822 — BerriAI / LiteLLMvulnKEV agrega CVE-2026-48710 — Kludex / StarlettevulnKEV agrega CVE-2026-49869 — Kestra / Kestra OSSvulnKEV agrega CVE-2026-82329 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-9586 — Sangoma / SwitchvoxvulnKEV agrega CVE-2026-83548 — SonicWall / SMA1000 AppliancesvulnKEV agrega CVE-2026-83549 — SonicWall / SMA1000 AppliancesvulnKEV agrega CVE-2026-82078 — PaperCut / NG/MFvulnKEV agrega CVE-2026-81578 — PaperCut / NG/MFvulnKEV agrega CVE-2023-49105 — ownCloud / ownCloudvulnKEV agrega CVE-2026-53362 — Linux / KernelvulnKEV agrega CVE-2026-66384 — JFrog / ArtifactoryvulnKEV agrega CVE-2021-23758 — Ajax.NET Professional / Ajax.NET ProfessionalvulnKEV agrega CVE-2026-85046 — Google / Chromium V8vulnKEV agrega CVE-2026-59822 — BerriAI / LiteLLMvulnKEV agrega CVE-2026-48710 — Kludex / StarlettevulnKEV agrega CVE-2026-49869 — Kestra / Kestra OSSvulnKEV agrega CVE-2026-82329 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-9586 — Sangoma / SwitchvoxvulnKEV agrega CVE-2026-83548 — SonicWall / SMA1000 AppliancesvulnKEV agrega CVE-2026-83549 — SonicWall / SMA1000 AppliancesvulnKEV agrega CVE-2026-82078 — PaperCut / NG/MFvulnKEV agrega CVE-2026-81578 — PaperCut / NG/MFvulnKEV agrega CVE-2023-49105 — ownCloud / ownCloudvulnKEV agrega CVE-2026-53362 — Linux / KernelvulnKEV agrega CVE-2026-66384 — JFrog / ArtifactoryvulnKEV agrega CVE-2021-23758 — Ajax.NET Professional / Ajax.NET Professional
← All CVEs
CVE WatchJul 23, 2026

CVE-2026-40409

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

CVSS

7.8

High

EPSS

0.3%

p22

KEV

—

Exploit Today

7

0-100

Published: Jun 9, 2026 · Last modified: Jul 23, 2026 · CWE-197

EPSS · 30d
0.3%EPSS · 30 days0.3%
2026-08-112026-09-07
Technical description

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Official references
Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-87529—
—
———Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)9hCVE-2026-785128.8 HIG
—
———Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.6hCVE-2026-698227.8 HIG
—
———Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.6hCVE-2026-695787.0 HIG
—
———Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally.6hCVE-2026-695357.8 HIG
—
———Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.5hCVE-2026-695128.0 HIG
—
———Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.5h