High · published December 9, 2025
⚡ A sneaky buffer over-read in Windows Projected File System means an attacker with access could level up their permissions like a character hitting the jackpot in a video game! 🎮 Think of it like finding a secret passage in a building that allows you to access restricted areas—except this time, the passage is an oversight in the system! An authorized attacker could exploit this vulnerability to elevate their privileges locally, potentially gaining access to sensitive data and system functions they shouldn't have. This could lead to unauthorized changes or data breaches, creating chaos in your environment. 😱
Think of it like finding a secret passage in a building that allows you to access restricted areas—except this time, the passage is an oversight in the system! The vulnerability arises from a buffer over-read, which allows an attacker to read memory locations beyond intended boundaries, potentially leaking privileged information or gaining unauthorized access.
An authorized attacker could exploit this vulnerability to elevate their privileges locally, potentially gaining access to sensitive data and system functions they shouldn't have. This could lead to unauthorized changes or data breaches, creating chaos in your environment. 😱 To mitigate this risk, ensure your system is updated to the latest patches provided by Microsoft. Review user permissions and restrict access where unnecessary. Implement monitoring to detect unusual activities on your systems. 🛡️ You've got this! With the right steps, you can keep your systems safe and sound! 💪✨
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1809 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_10_1809 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_10_21h2 | < 10.0.19044.6691 | 10.0.19044.6691 |
| microsoft/windows_10_22h2 | < 10.0.19045.6691 | 10.0.19045.6691 |
| microsoft/windows_11_23h2 | < 10.0.22631.6345 | 10.0.22631.6345 |
| microsoft/windows_11_24h2 | < 10.0.26100.7392 | 10.0.26100.7392 |
| microsoft/windows_11_25h2 | < 10.0.26200.7392 | 10.0.26200.7392 |
| microsoft/windows_server_2019 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_server_2022 | < 10.0.20348.4467 | 10.0.20348.4467 |
| microsoft/windows_server_2022_23h2 | < 10.0.25398.2025 | 10.0.25398.2025 |
| microsoft/windows_server_2025 | < 10.0.26100.7392 | 10.0.26100.7392 |