CVE-2026-50469

A use after free vulnerability in Windows Projected File System allows an authorized attacker to locally elevate privileges.

Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally. The flaw results from improper access permission settings.

Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.

A time-of-check time-of-use (TOCTOU) race condition vulnerability in Windows Projected File System allows an authorized attacker to perform tampering locally. The issue involves a race between checking and using a resource.

Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.

Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.

A vulnerability in the Windows Projected File System allows an authorized attacker to elevate privileges locally. The issue is caused by an out-of-bounds read.