cve 2026 49792

The cve 2026 49792 tag covers Microsoft’s security fix for an Important-rated vulnerability in the Windows Resilient File System (ReFS). The flaw is described as a numeric truncation error that could allow an authenticated local attacker to execute code on affected Windows 10, Windows 11, and Windows Server systems. Microsoft addressed the issue in the July 14, 2026 security updates. Coverage also notes a CVSS 3.1 base score of 7.8, with low attack complexity, limited privileges required, no user interaction, and potentially high impact to confidentiality, integrity, and availability. Administrators running ReFS workloads are advised to prioritize deployment, although exploitation is not known.