Windows Resilient File System (ReFS)

HIGH (8.8)

Threat Intelligence

Low Risk
EPSS Score: 0.08% chance of exploitation (percentile: 25%)
🔍 Detection Tools: None available in major open-source tools
⚔️ Exploit Availability: No public exploits found

How we test →

What is it?

The Windows Resilient File System (ReFS) is a file system designed for high-availability and performance. It's used in Windows Server 2012 R2, Windows Server 2016, and later versions.

Am I affected?

You're affected if you use Heap-based buffer overflow. Specific version info not stated in the advisory.

How to fix

Upgrade to Windows Server 2022 or later.
- Enable the "ReFS" file system on your server by running the command: fsutil.exe set quorum yes \\.\ (for Windows Server 2008 R2 to 2012 R2)
- Apply the security update from Microsoft Security Response Center: https://www.microsoft.com/en-us/download/details.aspx?id=61084

References