CVE-2026-42837
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
An out-of-bounds read vulnerability in the Windows Projected File System Filter Driver allows an authenticated attacker to elevate privileges locally. This flaw can be exploited to gain higher-level access on the affected system.
Risk Assessment
The organization faces the risk of local privilege escalation by an authenticated user, potentially leading to full system compromise and unauthorized access to sensitive information.
Recommendation
Apply the security update provided by the vendor as part of the latest patch release immediately. Test the patch in a non-production environment before deployment.
Original NVD description (English source)
Out-of-bounds read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.