High · published December 9, 2025
⚡ An out-of-bounds read in Windows Projected File System can give attackers a sneaky leg up in elevating privileges locally! 🤔 Think of it like a secret passage in a hotel that only certain guests know about, allowing them to access exclusive areas without the staff being any wiser. This flaw opens a hidden door that could let an attacker stroll into restricted zones where they shouldn't be! If exploited, an attacker could gain elevated privileges, allowing them to access sensitive data, install malicious software, or change system settings. This could lead to a total system compromise, putting everything at risk!
Think of it like a secret passage in a hotel that only certain guests know about, allowing them to access exclusive areas without the staff being any wiser. This flaw opens a hidden door that could let an attacker stroll into restricted zones where they shouldn't be! This vulnerability occurs due to improper handling of memory in the Windows Projected File System, allowing an authorized user to read memory locations outside their intended boundaries, leading to unauthorized privilege escalation.
If exploited, an attacker could gain elevated privileges, allowing them to access sensitive data, install malicious software, or change system settings. This could lead to a total system compromise, putting everything at risk! To mitigate this risk, ensure systems are updated to the latest version with the available patches. Regularly review user permissions and employ monitoring to detect suspicious activities. Stay vigilant! You've got this! With a few careful steps, you can lock down your system and keep it safe from prying eyes! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1809 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_10_1809 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_10_21h2 | < 10.0.19044.6691 | 10.0.19044.6691 |
| microsoft/windows_10_22h2 | < 10.0.19045.6691 | 10.0.19045.6691 |
| microsoft/windows_11_23h2 | < 10.0.22631.6345 | 10.0.22631.6345 |
| microsoft/windows_11_24h2 | < 10.0.26100.7392 | 10.0.26100.7392 |
| microsoft/windows_11_25h2 | < 10.0.26200.7392 | 10.0.26200.7392 |
| microsoft/windows_server_2019 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_server_2022 | < 10.0.20348.4467 | 10.0.20348.4467 |
| microsoft/windows_server_2022_23h2 | < 10.0.25398.2025 | 10.0.25398.2025 |
| microsoft/windows_server_2025 | < 10.0.26100.7392 | 10.0.26100.7392 |