CVE-2026-70084

Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally. The flaw results from improper access permission settings.

Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.

A time-of-check time-of-use (TOCTOU) race condition vulnerability in Windows Projected File System allows an authorized attacker to perform tampering locally. The issue involves a race between checking and using a resource.

A use after free vulnerability in Windows Projected File System allows an authorized attacker to locally elevate privileges.

Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.

Vulnerability in Windows Projected File System due to improper link resolution before file access. An authenticated attacker can elevate privileges locally.

Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.

A vulnerability in the Windows Projected File System allows an authorized attacker to elevate privileges locally. The issue is caused by an out-of-bounds read.