CVE-2026-84009
MediumCVSS 4.7Summary
A time-of-check time-of-use (TOCTOU) race condition vulnerability in Windows Projected File System allows an authorized attacker to perform tampering locally. The issue involves a race between checking and using a resource.
Risk Assessment
An authorized attacker with local access may modify data or system resources. This can lead to a breach of system integrity.
Recommendation
Apply Microsoft security updates for Windows Projected File System. Restrict local access to trusted users.
Other vulnerabilities in Windows Projected File System
See all- CVE-2026-96857Medium
Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally. The flaw results from improper access permission settings.
- CVE-2026-85328High
Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-70084Medium
Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.
- CVE-2026-34340High
A use after free vulnerability in Windows Projected File System allows an authorized attacker to locally elevate privileges.
- CVE-2026-62751High
Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-50469High
Vulnerability in Windows Projected File System due to improper link resolution before file access. An authenticated attacker can elevate privileges locally.
- CVE-2025-62467High
Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2025-62464High
Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2025-62462High
Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2025-55233High
A vulnerability in the Windows Projected File System allows an authorized attacker to elevate privileges locally. The issue is caused by an out-of-bounds read.
Original NVD description (English source)
Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS