CVE-2025-55233
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
A vulnerability in the Windows Projected File System allows an authorized attacker to elevate privileges locally. The issue is caused by an out-of-bounds read.
Risk Assessment
An attacker with local access could gain higher privileges, potentially leading to full system compromise or malware installation.
Recommendation
Apply security updates provided by Microsoft for Windows that address this vulnerability.
Other vulnerabilities in Windows Projected File System
See all- CVE-2026-34340High
A use after free vulnerability in Windows Projected File System allows an authorized attacker to locally elevate privileges.
- CVE-2026-62751High
Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-50469High
Vulnerability in Windows Projected File System due to improper link resolution before file access. An authenticated attacker can elevate privileges locally.
- CVE-2025-62467High
Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2025-62464High
Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2025-62462High
Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2023-35378High
A vulnerability in the Windows Projected File System allows for elevation of privilege, potentially leading to unauthorized access to the system.
- CVE-2021-33743High
Elevation of privilege vulnerability in the Windows Projected File System. It allows a local attacker to gain elevated privileges.
- CVE-2021-26870High
Elevation of privilege vulnerability in Windows Projected File System.
Original NVD description (English source)
Out-of-bounds read in Windows Projected File System allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS