CVE-2026-88162: Windows Encrypting File System (EFS) Tampering Vulnerability
Published Oct 13, 2026
·Updated
Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.
Other sources
Windows Encrypting File System (EFS) Tampering Vulnerability
— Microsoft
Affected Software
1 affected component
Microsoft Windows Encrypting File System (EFS)
Event History
Oct 13, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
DescriptionSeverity
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
An attacker must already be authorized on the affected Windows system and be able to act locally. The vulnerability does not describe network-based exploitation or require user interaction.
2
What is the expected impact if exploited?
The stated impact is tampering: an authorized local attacker may modify affected content or operations through EFS. The supplied severity vector indicates integrity impact, with no stated confidentiality or availability impact.