CVE-2026-85328

A use after free vulnerability in Windows Projected File System allows an authorized attacker to locally elevate privileges.

Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally. The flaw results from improper access permission settings.

A time-of-check time-of-use (TOCTOU) race condition vulnerability in Windows Projected File System allows an authorized attacker to perform tampering locally. The issue involves a race between checking and using a resource.

Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.

Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.

Vulnerability in Windows Projected File System due to improper link resolution before file access. An authenticated attacker can elevate privileges locally.

Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.

A vulnerability in the Windows Projected File System allows an authorized attacker to elevate privileges locally. The issue is caused by an out-of-bounds read.