Microsoft EUVD-2026-22501

Apply Microsoft security updates immediately through Windows Update or enterprise deployment mechanisms. Patched versions that resolve CVE-2026-32074 include Windows Server 2019 build 10.0.17763.8644 or later, Windows 10 Version 1809 build 10.0.17763.8644 or later, Windows 10 Version 21H2 build 10.0.19044.7184 or later, Windows 10 Version 22H2 build 10.0.19045.7184 or later, Windows 11 Version 22H3/23H2 build 10.0.22631.6936 or later, Windows 11 Version 24H2 build 10.0.26100.32690 or later, Windows 11 Version 25H2 build 10.0.26200.8246 or later, Windows 11 Version 26H1 build 10.0.28000.1836 or later, Windows Server 2022 build 10.0.20348.5020 or later, Windows Server 2022 23H2 Edition build 10.0.25398.2274 or later, and Windows Server 2025 build 10.0.26100.32690 or later. Consult the Microsoft Security Response Center update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32074 for deployment guidance. No effective workarounds exist that maintain ProjFS functionality; organizations unable to immediately patch should implement compensating controls including strict user privilege management, enhanced monitoring of privilege escalation attempts via Event ID 4672 and 4673, and network segmentation to limit lateral movement from compromised low-privilege accounts.