PT-2026-58138 · Microsoft · Brokering File System

Published 2026-07-14 · Updated 2026-07-14 · CVE-2026-49162

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Brokering File System (affected versions not specified)

Description A use-after-free condition exists in the Microsoft Brokering File System. A use-after-free is a memory corruption issue that occurs when an application continues to use a pointer after it has been freed. This flaw allows an authorized attacker with local access to elevate their privileges on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-49162

Affected Products

Brokering File System

References · 5

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49162 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-49162 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-49162 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-49162 · Vendor Advisory
• https://twitter.com/windowsforum/status/2077108152651116835 · Twitter Post