CVE-2026-85328
HighCVSS 7.0Summary
Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with valid credentials could exploit this vulnerability to gain higher privileges on the system, potentially leading to full device compromise.
Recommendation
Immediately apply available Microsoft security updates for the Projected File System and restrict local access to trusted users.
Other vulnerabilities in Windows Projected File System
See all- CVE-2026-34340High
A use after free vulnerability in Windows Projected File System allows an authorized attacker to locally elevate privileges.
- CVE-2026-62751High
Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-50469High
Vulnerability in Windows Projected File System due to improper link resolution before file access. An authenticated attacker can elevate privileges locally.
- CVE-2025-62467High
Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2025-62464High
Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2025-62462High
Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2025-55233High
A vulnerability in the Windows Projected File System allows an authorized attacker to elevate privileges locally. The issue is caused by an out-of-bounds read.
- CVE-2023-35378High
A vulnerability in the Windows Projected File System allows for elevation of privilege, potentially leading to unauthorized access to the system.
- CVE-2021-33743High
Elevation of privilege vulnerability in the Windows Projected File System. It allows a local attacker to gain elevated privileges.
- CVE-2021-26870High
Elevation of privilege vulnerability in Windows Projected File System.
Original NVD description (English source)
Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS