High · published December 9, 2025
⚡ An authorized attacker can exploit a buffer over-read in Windows Projected File System to elevate privileges locally, like a sneaky invader discovering a secret room in a castle! 🏰 Think of it like a restaurant with a hidden kitchen stocked with gourmet ingredients that only certain staff should access. If an authorized employee finds a way to peek into that kitchen, they could whip up some dangerous chef specials without anyone knowing. This vulnerability could allow an attacker to gain elevated privileges on the system, potentially giving them full control to access sensitive data or perform unauthorized actions. Imagine the chaos if someone could unlock all the doors from the inside — they could wreak havoc on your entire network!
Think of it like a restaurant with a hidden kitchen stocked with gourmet ingredients that only certain staff should access. If an authorized employee finds a way to peek into that kitchen, they could whip up some dangerous chef specials without anyone knowing. The buffer over-read flaw in Windows Projected File System allows attackers, with initial access, to read beyond the intended memory boundaries, leading to unauthorized access to privileged information or functionality.
This vulnerability could allow an attacker to gain elevated privileges on the system, potentially giving them full control to access sensitive data or perform unauthorized actions. Imagine the chaos if someone could unlock all the doors from the inside — they could wreak havoc on your entire network! To mitigate this issue, ensure that your Windows systems are updated with the latest patches from Microsoft. Regularly audit user permissions to minimize the number of authorized users and limit access where possible. Additionally, consider implementing monitoring tools to detect unusual privilege escalations. You've got this! With a little diligence, you can seal up this vulnerability and keep your systems safe! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1809 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_10_1809 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_10_21h2 | < 10.0.19044.6691 | 10.0.19044.6691 |
| microsoft/windows_10_22h2 | < 10.0.19045.6691 | 10.0.19045.6691 |
| microsoft/windows_11_23h2 | < 10.0.22631.6345 | 10.0.22631.6345 |
| microsoft/windows_11_24h2 | < 10.0.26100.7392 | 10.0.26100.7392 |
| microsoft/windows_11_25h2 | < 10.0.26200.7392 | 10.0.26200.7392 |
| microsoft/windows_server_2019 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_server_2022 | < 10.0.20348.4467 | 10.0.20348.4467 |
| microsoft/windows_server_2022_23h2 | < 10.0.25398.2025 | 10.0.25398.2025 |
| microsoft/windows_server_2025 | < 10.0.26100.7392 | 10.0.26100.7392 |