PULSE
LIVE0signals / 24h
FEED
vulnKEV agrega CVE-2026-76461 — Cisco / Secure Email GatewayvulnKEV agrega CVE-2026-84869 — ConnectWise / ScreenConnectvulnKEV agrega CVE-2026-42016 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-42018 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-85706 — GitLab / Community Edition and Enterprise EditionvulnKEV agrega CVE-2026-86060 — MikroTik / RouterOSvulnKEV agrega CVE-2026-67277 — MikroTik / RouterOSvulnKEV agrega CVE-2026-19490 — Citrix / NetScalervulnKEV agrega CVE-2025-25249 — Fortinet / Multiple ProductsvulnKEV agrega CVE-2026-87491 — Google / Chromium V8vulnKEV agrega CVE-2026-20079 — Cisco / Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementvulnKEV agrega CVE-2026-75650 — Adobe / Commerce and MagentovulnKEV agrega CVE-2026-81963 — Microsoft / WindowsvulnKEV agrega CVE-2026-86218 — N-able / N-centralvulnKEV agrega CVE-2026-76461 — Cisco / Secure Email GatewayvulnKEV agrega CVE-2026-84869 — ConnectWise / ScreenConnectvulnKEV agrega CVE-2026-42016 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-42018 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-85706 — GitLab / Community Edition and Enterprise EditionvulnKEV agrega CVE-2026-86060 — MikroTik / RouterOSvulnKEV agrega CVE-2026-67277 — MikroTik / RouterOSvulnKEV agrega CVE-2026-19490 — Citrix / NetScalervulnKEV agrega CVE-2025-25249 — Fortinet / Multiple ProductsvulnKEV agrega CVE-2026-87491 — Google / Chromium V8vulnKEV agrega CVE-2026-20079 — Cisco / Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementvulnKEV agrega CVE-2026-75650 — Adobe / Commerce and MagentovulnKEV agrega CVE-2026-81963 — Microsoft / WindowsvulnKEV agrega CVE-2026-86218 — N-able / N-central
← All CVEs
CVE WatchJul 22, 2026

CVE-2026-49792

Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.

CVSS

7.8

High

EPSS

0.3%

p26

KEV

Exploit Today

8

0-100

Published: Jul 14, 2026 · Last modified: Jul 22, 2026 · CWE-197

EPSS · 30d
0.3%EPSS · 30 days0.3%
2026-08-182026-09-14
Technical description

Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.

Official references
Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-875299.6 CRI
38.7%
12Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)6d
CVE-2026-785128.8 HIG
55.2%
17Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.7d
CVE-2026-698227.8 HIG
24.6%
7Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.7d
CVE-2026-695787.0 HIG
10.5%
3Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally.1d
CVE-2026-695357.8 HIG
15.9%
5Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.7d
CVE-2026-695128.0 HIG
53.5%
16Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.7d