CVE-2025-62456

High · 8.8

CVSS

8.8

EPSS

1.1%

Published

Dec 9, 2025

CISA due date

—

The record

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code over a network.

Ecosystem	Package	Introduced	Fixed