Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected software.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-07-14 | 2 | Patch2 |
| 2026-07-16 | 2 | Disclosure1Patch1 |
| 2026-07-20 | 1 | General1 |
| 2026-09-24 | 1 | Disclosure1 |
| 2026-09-28 | 1 | Disclosure1 |
Local privilege escalation to SYSTEM due to Integer overflow in the WinFsp kernel driver (@ultimat3hg) https://blog.uhg.sg/cve/cve-2026-7162 #infosec https://t.co/yvrTnIL9Vu
Post summary
The tweet discloses CVE-2026-7162, detailing a local privilege escalation integer overflow in the WinFsp kernel driver, but provides no information regarding patches, exploit code, or active exploitation.
here's the writeup https://blog.uhg.sg/cve/cve-2026-7162
Post summary
The post provides only a link to a writeup about CVE-2026-7162, without any explicit details on PoC, exploit, patch, or active exploitation.
CVE-2026-7162 Root Cause Analysis - @ultimat3hg Integer overflow in the WinFsp kernel driver leading to an unprivileged NonPagedPool overflow and local privilege escalation to SYSTEM https://blog.uhg.sg/cve/cve-2026-7162
Post summary
The post announces a root cause analysis for CVE-2026-7162, detailing an integer overflow in the WinFsp kernel driver that allows local privilege escalation to SYSTEM.
WinFsp CVE-2026-7162 got released a few days ago :) i'll be holding out for a few more days for my blog post @malware_owl and i are still cooking...
Post summary
The user notes that WinFsp CVE-2026-7162 was recently released and plans to publish a blog post soon.
@ultimat3hg and I reported a vulnerability in WinFSP some time back which has since be credited CVE-2026-7162. It was an integer overflow bug leading to successful EoP from Low Integrity CMD. It has since been patched in version 2.2.26183 and later! Licensees and developers making use of WinFSP are advised to use the updated version :) Once again, thanks to @BZissimopoulos for the quick reply and patch. Demo: https://youtu.be/KGuCgyH1l4o?si=ykMODkSe9BKMwSih Advisory: https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-086/
Post summary
The tweet reports that WinFSP CVE‑2026‑7162, an integer‑overflow EoP bug, has been fixed in version 2.2.26183, with a demo video and official advisory linked.
WinFsp vulnerabilities CVE-2026-3006 and CVE-2026-7162 enable local privilege escalation to SYSTEM on Windows. Update to WinFsp 2026 Beta2 now. #WinFsp #CVE20263006 #CVE20267162 #PrivilegeEscalation #CyberSecurity http://securityonline.info/winfsp-vulnerabilities/
Post summary
The post alerts users to the WinFsp CVEs CVE-2026-3006 and CVE-2026-7162 that allow local privilege escalation, and urges them to update to WinFsp 2026 Beta2.
🚨 CVE-2026-3006 & CVE-2026-7162: Two WinFsp vulnerabilities could allow local privilege escalation to SYSTEM on Windows. Update to WinFsp 2026 Beta2. #CyberSecurity #CVE #Windows #WinFsp #ThreatWire
Post summary
A tweet alerts to two WinFsp CVEs (CVE‑2026‑3006 and CVE‑2026‑7162) that permit local privilege escalation to SYSTEM on Windows and recommends updating to WinFsp 2026 Beta2 to mitigate the risk.