Windows 11 version 22H3 vulnerability

What happened

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code over a network.

Affected versions

Windows 11 version 22H3: 10.0.22631.0 through before 10.0.22631.6345 (custom); 10.0.26100.0 through before 10.0.26100.7462 (custom); 10.0.26200.0 through before 10.0.26200.7462 (custom); 10.0.20348.0 through before 10.0.20348.4529 (custom); 10.0.25398.0 through before 10.0.25398.2025 (custom) Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.