Successful exploitation of the race condition vulnerability could allow
an attacker to trigger a kernel heap overflow, potentially leading to local privilege
es…

CVE-2026-3006 is a race condition vulnerability in WinFSP that can be exploited to trigger a kernel heap overflow. Successful exploitation allows an attacker to achieve local privilege escalation and gain system-level access to the affected software. The vulnerability represents a high-severity security issue that could compromise the integrity of systems running vulnerable versions of WinFSP. The issue has been addressed in version v2.2B1 according to the GitHub release notes.