EUVD-2026-22374CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
AnalysisAI
Out-of-bounds read in Windows Encrypting File System (EFS) enables low-privileged local attackers to escalate to SYSTEM privileges on Windows 10 (versions 1809, 21H2, 22H2), Windows 11 (versions 22H3 through 26H1), and Windows Server 2019/2022/2025. The vulnerability (CWE-125) requires local access and low-level privileges but no user interaction, yielding complete system compromise with high impact to confidentiality, integrity, and availability (CVSS 7.8). …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Inventory all Windows 10 (versions 1809, 21H2, 22H2), Windows 11 (versions 22H3-26H1), and Windows Server 2019/2022/2025 systems in your environment. Within 7 days: Deploy vendor-released patches to all affected systems via WSUS, SCCM, or equivalent patch management tools; prioritize servers and systems handling sensitive data. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today