CVE-2023-35378
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
A vulnerability in the Windows Projected File System allows for elevation of privilege, potentially leading to unauthorized access to the system.
Risk Assessment
An attacker could exploit this vulnerability to gain elevated privileges, posing a serious threat to the integrity and confidentiality of data within the organization.
Recommendation
It is recommended to update Windows to the latest version to patch this vulnerability and to monitor systems for unauthorized activities.
Other vulnerabilities in Windows Projected File System
See all- CVE-2026-34340High
A use after free vulnerability in Windows Projected File System allows an authorized attacker to locally elevate privileges.
- CVE-2026-96857Medium
Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally. The flaw results from improper access permission settings.
- CVE-2026-85328High
Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-84009Medium
A time-of-check time-of-use (TOCTOU) race condition vulnerability in Windows Projected File System allows an authorized attacker to perform tampering locally. The issue involves a race between checking and using a resource.
- CVE-2026-70084Medium
Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.
- CVE-2026-62751High
Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-50469High
Vulnerability in Windows Projected File System due to improper link resolution before file access. An authenticated attacker can elevate privileges locally.
- CVE-2025-62467High
Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2025-62464High
Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2025-62462High
Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Windows Projected File System Elevation of Privilege Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS