CVE-2026-20940CWE-822

CVE-2026-20940

High · published January 13, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
38.6
In the wild
Unconfirmed
What it is

⚡ An authorized attacker could exploit a heap-based buffer overflow in the Windows Cloud Files Mini Filter Driver! Think of it like a building with a poorly secured elevator — once inside, someone with the right access could push all the buttons and gain entry to restricted floors without any extra keys! If exploited, this vulnerability could allow an attacker to elevate their privileges locally, which means they could take control of sensitive operations or access confidential data — a nightmare scenario for any organization! Protecting against this is not just smart; it's essential!

Put simply

Think of it like a building with a poorly secured elevator — once inside, someone with the right access could push all the buttons and gain entry to restricted floors without any extra keys! This heap-based buffer overflow occurs in the Windows Cloud Files Mini Filter Driver, allowing attackers with local access to potentially overwrite the memory and gain elevated privileges.

What to do

If exploited, this vulnerability could allow an attacker to elevate their privileges locally, which means they could take control of sensitive operations or access confidential data — a nightmare scenario for any organization! Protecting against this is not just smart; it's essential! To mitigate this risk, ensure that your systems are updated with the latest security patches from Microsoft. Regularly review user access privileges and limit local user rights where possible. Implementing additional security measures, like antivirus software, can also help. You've got this! With these steps, you can secure your systems and keep your digital castle safe! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00456 · 38.6th percentile
Weakness
CWE-822 · Untrusted Pointer Dereference
Published
2026-01-13T23:16Z
Affected products (20)
ProductVersionsFixed in
microsoft/windows_10_1607< 10.0.14393.878310.0.14393.8783
microsoft/windows_10_1607< 10.0.14393.878310.0.14393.8783
microsoft/windows_10_1809< 10.0.17763.827610.0.17763.8276
microsoft/windows_10_1809< 10.0.17763.827610.0.17763.8276
microsoft/windows_10_21h2< 10.0.19044.680910.0.19044.6809
microsoft/windows_10_21h2< 10.0.19044.680910.0.19044.6809
microsoft/windows_10_21h2< 10.0.19044.680910.0.19044.6809
microsoft/windows_10_22h2< 10.0.19045.680910.0.19045.6809
microsoft/windows_10_22h2< 10.0.19045.680910.0.19045.6809
microsoft/windows_10_22h2< 10.0.19045.680910.0.19045.6809
microsoft/windows_11_23h2< 10.0.22631.649110.0.22631.6491
microsoft/windows_11_23h2< 10.0.22631.649110.0.22631.6491
microsoft/windows_server_2008all versions—
microsoft/windows_server_2008all versions—
microsoft/windows_server_2008all versions—
microsoft/windows_server_2012all versions—
microsoft/windows_server_2012all versions—
microsoft/windows_server_2016< 10.0.14393.878310.0.14393.8783
microsoft/windows_server_2019< 10.0.17763.827610.0.17763.8276
microsoft/windows_server_2022< 10.0.20348.464810.0.20348.4648
References (1)
EPSS history
Timeline
  • 13 JAN 17:56Z
    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
    cvelistv5