How many CVEs does winfsp have?

winfsp has 3 published CVE records since 2026, including 3 in the last two years.

How many winfsp CVEs are in CISA KEV?

None of winfsp's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which winfsp products have the most CVEs?

The winfsp products with the most published CVEs are winfsp.

What are the most common weakness types in winfsp CVEs?

winfsp's CVEs most often map to these CWE weakness types: CWE-190 (Integer Overflow or Wraparound), CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')), CWE-476 (NULL Pointer Dereference).

Are there public exploits for winfsp vulnerabilities?

No winfsp CVEs currently have a tracked public exploit in this dataset.

What is the average severity of winfsp CVEs?

The average CVSS base score across winfsp's scored CVEs is 7.2.

RadicalNotion.AI

Log in Create an account

3 CVEs

winfsp Vulnerabilities

Name: winfsp vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for winfsp.

3

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.2

Avg CVSS

2026–2026

Overview

winfsp has 3 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.2.

Security scorecard

A quick read on winfsp's vulnerability posture, as a share of its 3 published CVEs.

Average CVSS: 7.2
Critical / high: 67%
Actively exploited (KEV): 0%
Public exploit available: 0%
Patch available: 100%

Severity and exploitation

How the CVSS severity of winfsp's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High2

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of winfsp's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No winfsp CVEs currently have a tracked public exploit.

Most affected products

The winfsp products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

winfsp3 CVEs

Common weakness types

The CWE weakness categories most often found in winfsp CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish winfsp CVE records.

Latest winfsp CVEs

The most recently disclosed vulnerabilities affecting winfsp.

WinFsp through 2.2.26215 NULL Pointer Dereference via Fast I/O
CWE-476
Medium · CVSS 6.8
EPSS 0.2%2026-09-18
High vulnerability · 2026-07-13
CWE-190
High · CVSS 7.8
EPSS 0.1%2026-07-13
Race Condition Vulnerability
CWE-362
High · CVSS 7.0
EPSS 0.1%2026-04-27

Get an alert for each new winfsp CVE, with AI-written analysis and remediation steps.

Monitor winfsp CVEs

Other vendors

CVE counts for other vendors.

microsoft41,739 CVEs linux25,260 CVEs Google17,495 CVEs Apple15,495 CVEs Oracle13,348 CVEs Debian10,233 CVEs IBM9,452 CVEs Red Hat8,581 CVEs

Browse all vendors

Frequently asked questions

Common questions about winfsp vulnerabilities.

How many CVEs does winfsp have?: winfsp has 3 published CVE records since 2026, including 3 in the last two years.
How many winfsp CVEs are in CISA KEV?: None of winfsp's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which winfsp products have the most CVEs?: The winfsp products with the most published CVEs are winfsp.
What are the most common weakness types in winfsp CVEs?: winfsp's CVEs most often map to these CWE weakness types: CWE-190 (Integer Overflow or Wraparound), CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')), CWE-476 (NULL Pointer Dereference).
Are there public exploits for winfsp vulnerabilities?: No winfsp CVEs currently have a tracked public exploit in this dataset.
What is the average severity of winfsp CVEs?: The average CVSS base score across winfsp's scored CVEs is 7.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track winfsp vulnerabilities

Get an alert for each new winfsp CVE, with AI-written analysis and remediation steps.

Create an account See pricing