PULSEUnderground Intel

LIVE25signals / 24h

FEED

ransomsilentransomgroup reclama a M... C... · Not Foundransomqilin reclama a United Restaurant Supply · US · Hospitalityransombravox reclama a AMSAM · FR · Not Foundransombravox reclama a Barrow & Grimm · US · Not Foundransomsilentransomgroup reclama a M...r · Not Foundransomsilentransomgroup reclama a Kirkland & Ellis LLP · US · Professional Servicesransomakira reclama a Bethany Press International · Retail & E-Commerceransomakira reclama a Medienwerkstatt · DE · Educationransomakira reclama a Annapath · Not Foundransomrhysida reclama a DR.SCHNELL GmbH & Co. KGaA · DE · Manufacturingransomqilin reclama a Airtificial · Technologyransomqilin reclama a Bathurst RSL · AU · Hospitalityransomqilin reclama a Creative Universe · AU · Otherransomeverest reclama a PWC · GB · Professional Servicesransomsilentransomgroup reclama a M... C... · Not Foundransomqilin reclama a United Restaurant Supply · US · Hospitalityransombravox reclama a AMSAM · FR · Not Foundransombravox reclama a Barrow & Grimm · US · Not Foundransomsilentransomgroup reclama a M...r · Not Foundransomsilentransomgroup reclama a Kirkland & Ellis LLP · US · Professional Servicesransomakira reclama a Bethany Press International · Retail & E-Commerceransomakira reclama a Medienwerkstatt · DE · Educationransomakira reclama a Annapath · Not Foundransomrhysida reclama a DR.SCHNELL GmbH & Co. KGaA · DE · Manufacturingransomqilin reclama a Airtificial · Technologyransomqilin reclama a Bathurst RSL · AU · Hospitalityransomqilin reclama a Creative Universe · AU · Otherransomeverest reclama a PWC · GB · Professional Services

CVE WatchOct 13, 2026

CVE-2026-83586

Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locall

CVSS

7.8

High

EPSS

0.3%

p20

KEV

—

Exploit Today

6

0-100

Published: Oct 13, 2026 · Last modified: Oct 13, 2026 · CWE-1390

EPSS · 30d

0.3%EPSS · 30 days0.3%

2026-10-142026-10-21

Technical description

Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.

Official references

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83586

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-881017.8 HIG

——3Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.6d CVE-2026-859395.3 MED

——9Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.6d CVE-2026-859227.4 HIG

——13Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.6d CVE-2026-853767.8 HIG

——6Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.6d CVE-2026-853287.0 HIG

——4Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.6d CVE-2026-853236.8 MED

——12Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network.6d