NetSight
high7.8

CVE-2026-32078

Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally.

Impact

Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally.

Affected products

VendorProductAffected versions
MicrosoftWindows 10 1809
before 10.0.17763.8644
MicrosoftWindows 10 21h2
before 10.0.19044.7184
MicrosoftWindows 10 22h2
before 10.0.19045.7184
MicrosoftWindows 11 23h2
before 10.0.22631.6936
MicrosoftWindows 11 24h2
before 10.0.26100.8246
MicrosoftWindows 11 25h2
before 10.0.26200.8246
MicrosoftWindows 11 26h1
before 10.0.28000.1836
MicrosoftWindows Server 2019
before 10.0.17763.8644
MicrosoftWindows Server 2022
before 10.0.20348.5020
MicrosoftWindows Server 2022 23h2
before 10.0.25398.2274
MicrosoftWindows Server 2025
before 10.0.26100.32690

Weakness classification

References