EUVD-2026-22430
GHSA-4gmq-qmqj-mjvf
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.
AnalysisAI
Windows Projected File System buffer over-read allows authenticated local attackers with low privileges to escalate to high integrity, potentially achieving SYSTEM-level access across Windows 10, Windows 11, and Windows Server platforms. This CWE-126 memory disclosure vulnerability scores 7.8 CVSS with straightforward exploitation (low complexity, no user interaction), affecting extensive Windows infrastructure from legacy 1809 through current 26H1 builds. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Inventory all Windows 10 (1809+), Windows 11, and Windows Server systems in your environment and verify current patch levels. Within 7 days: Deploy vendor-released patches to all affected systems prioritizing Windows Server and administrative workstations; consult Microsoft's advisory for exact KB numbers and version-specific patch versions. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today