Local code execution via ReFS integer overflow

Integer overflow in Microsoft Windows ReFS allows local users to execute code by triggering heap-based memory corruption. Microsoft identifies integer wraparound and a resulting heap buffer overflow in ReFS but has not disclosed the affected calculation, structure, or function. Low-privilege local access is required, and successful exploitation runs code on the affected Windows host without user interaction.