What is the CVSS score of EUVD-2026-22430?

EUVD-2026-22430 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Microsoft are affected by EUVD-2026-22430?

CVE-2026-26184 is a high-severity privilege escalation vulnerability in Windows Projected File System that allows authenticated local users with limited permissions to escalate to SYSTEM-level access…. A patch is available.

How to fix or mitigate EUVD-2026-22430?

Within 24 hours: Inventory all Windows 10 (1809+), Windows 11, and Windows Server systems in your environment and verify current patch levels. Within 7 days: Deploy vendor-released patches to all affected systems prioritizing Windows Server and administrative workstations; consult Microsoft's advisory for exact KB numbers and version-specific patch versions. Within 30 days: Complete deployment to all remaining systems and validate patch installation through configuration management or WSUS reports.

Microsoft EUVD-2026-22430

| CVE-2026-26184 HIGH

Buffer Over-read (CWE-126)

2026-04-14 microsoft

GHSA-4gmq-qmqj-mjvf

Buffer Overflow Microsoft

7.8

CVSS 3.1 · NVD

Temporal: 6.8

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CIRCL (temporal)

6.8 MEDIUM

cvss

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Re-analysis Queued

Apr 17, 2026 - 15:22 vuln.today

cvss_changed

Analysis Generated

Apr 14, 2026 - 19:28 vuln.today

EUVD ID Assigned

Apr 14, 2026 - 17:46 euvd

EUVD-2026-22430

Analysis Generated

Apr 14, 2026 - 17:46 vuln.today

Patch released

Apr 14, 2026 - 17:46 nvd

Patch available

CVE Published

Apr 14, 2026 - 16:58 nvd

HIGH 7.8

DescriptionCVE.org

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.

AnalysisAI

Windows Projected File System buffer over-read allows authenticated local attackers with low privileges to escalate to high integrity, potentially achieving SYSTEM-level access across Windows 10, Windows 11, and Windows Server platforms. This CWE-126 memory disclosure vulnerability scores 7.8 CVSS with straightforward exploitation (low complexity, no user interaction), affecting extensive Windows infrastructure from legacy 1809 through current 26H1 builds. No public exploit identified at time of

Technical ContextAI

The Windows Projected File System (ProjFS) is a kernel-mode virtualization technology that allows user-mode applications to project file system content into the namespace, commonly used by cloud storage providers and development tools like Git virtual file systems. The CWE-126 buffer over-read occurs when ProjFS reads beyond allocated memory boundaries during file operation handling. This class of vulnerability typically arises from improper bounds checking when processing file metadata, reparse points, or callback data structures. As ProjFS operates in kernel context to intercept and virtualize file system operations, memory disclosure from kernel space can leak security tokens, kernel addresses defeating ASLR, or authentication credentials. The affected CPE scope spans Windows 10 versions 1809 through 22H2, all Windows 11 releases (22H3, 23H2, 24H2, 25H2, 26H1), and Windows Server 2019/2022/2025 including Server Core installations, indicating the vulnerability exists in core ProjFS implementation shared across modern Windows kernel architectures.

RemediationAI

Apply Microsoft security updates immediately through Windows Update or WSUS to patch the Projected File System vulnerability. Vendor-released patches upgrade affected systems to fixed builds: Windows 10 1809/Server 2019 to 10.0.17763.8644 or later, Windows 10 21H2 to 10.0.19044.7184 or later, Windows 10 22H2 to 10.0.19045.7184 or later, Windows 11 22H3/23H2 to 10.0.22631.6936 or later, Windows 11 24H2/Server 2025 to 10.0.26100.32690 or later, Windows 11 25H2 to 10.0.26200.8246 or later, Windows 11 26H1 to 10.0.28000.1836 or later, Windows Server 2022 to 10.0.20348.5020 or later, and Windows Server 2022 23H2 to 10.0.25398.2274 or later. Download patches from Microsoft Update Catalog or deploy via enterprise patch management solutions. No effective workarounds exist short of disabling ProjFS functionality, which would break cloud storage synchronization and virtualized file systems. Prioritize patching systems with untrusted local users, terminal servers, and development environments. Official update guidance available at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26184.