🟠 High | Source: Microsoft Security Response Center
CVE-2026-50357 is an elevation of privilege vulnerability in the Windows Resilient File System (ReFS), a file system used across Windows Server environments including Azure-hosted virtual machines. If exploited, an attacker with limited local access could gain higher-level system privileges, potentially taking full control of an affected machine. This type of vulnerability is particularly concerning in shared or multi-tenant cloud environments where privilege containment is critical.
Security Architect’s Take: Ensure all Windows Server VMs running on Azure (or on-premises infrastructure connected to Azure) have the latest Microsoft patches applied promptly; prioritise any systems where ReFS volumes are in use, and review whether your patch management tooling — such as Azure Update Manager — is enforcing timely deployment across your estate.
Original advisory: CVE-2026-50357 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability