CVE-2026-96857
MediumCVSS 5.5Summary
Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally. The flaw results from improper access permission settings.
Risk Assessment
An authenticated user could locally access files or directories they should not be authorized to see, potentially leading to information disclosure.
Recommendation
Promptly install Microsoft patches for the Windows Projected File System and verify file and directory access permissions.
Other vulnerabilities in Windows Projected File System
See all- CVE-2026-85328High
Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-84009Medium
A time-of-check time-of-use (TOCTOU) race condition vulnerability in Windows Projected File System allows an authorized attacker to perform tampering locally. The issue involves a race between checking and using a resource.
- CVE-2026-70084Medium
Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.
- CVE-2026-34340High
A use after free vulnerability in Windows Projected File System allows an authorized attacker to locally elevate privileges.
- CVE-2026-62751High
Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-50469High
Vulnerability in Windows Projected File System due to improper link resolution before file access. An authenticated attacker can elevate privileges locally.
- CVE-2025-62467High
Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2025-62464High
Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2025-62462High
Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2025-55233High
A vulnerability in the Windows Projected File System allows an authorized attacker to elevate privileges locally. The issue is caused by an out-of-bounds read.
Original NVD description (English source)
Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS