CVE-2026-20940

CVE-2026-20940 is a heap-based buffer overflow in the Windows Cloud Files Mini Filter Driver that enables a locally authenticated attacker to elevate privileges. Connected advisories confirm the affected component (Cloud Files Mini Filter Driver) and the privilege-escalation impact; Microsoft has...

CVE-2026-20940 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

...

CVE-2026-20940 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

...

CVE-2026-20940

Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-20857 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

...

CVE-2026-20857 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

...

CVE-2026-20857

Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-20857

CVE-2026-20857 affects the Windows Cloud Files Mini Filter Driver. The vulnerability is an untrusted pointer dereference that enables an authorized attacker to elevate privileges locally. Multiple Nessus/NVD/NCSC entries map this CVE to the January 2026 Microsoft security update KB5074109 (Window...

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

PT-2026-2702

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An issue exists in the Windows Cloud Files Mini Filter Driver where an untrusted pointer dereference can occur. This can allow a locally authorized attacker to gain elevated privileges. The...

Microsoft Windows Cloud Files Mini Filter Driver 安全漏洞

Microsoft Windows Cloud Files Mini Filter Driver is a cloud file filter driver from Microsoft USA. An elevation of privilege vulnerability exists in Microsoft Windows Cloud Files Mini Filter Driver, which can be exploited by an attacker to elevate privileges...

Microsoft Windows Cloud Files Mini Filter Driver 安全漏洞

Microsoft Windows Cloud Files Mini Filter Driver is a cloud file filter driver from Microsoft USA. An elevation of privilege vulnerability exists in Microsoft Windows Cloud Files Mini Filter Driver due to an untrusted pointer dereference flaw in the Cloud Files Mini-Filter Driver component. An...

KLA90840 Multiple vulnerabilities were found in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information, cause denial of service, spoof user interface. Below is a complete list of...

PT-2026-2742

CVE-2026-20940 Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. https://t.co/Adw7dGq8xp...

KB5073724: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (January 2026)

The remote Windows host is missing security update 5073724. It is, therefore, affected by multiple vulnerabilities - Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. CVE-2026-20857 - An issue was discovered in...

KB5073450: Windows Server version 23H2 Security Update (January 2026)

The remote Windows host is missing security update 5073450. It is, therefore, affected by multiple vulnerabilities - Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. CVE-2026-20857 - An issue was discovered in...

KB5073723: Windows 10 version 1809 / Windows Server 2019 Security Update (January 2026)

The remote Windows host is missing security update 5073723. It is, therefore, affected by multiple vulnerabilities - Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. CVE-2026-20857 - An issue was discovered in...

Exploit for Use After Free in Microsoft

CVE-2025-62221 Windows Cloud Files Mini Filter Driver Exploit...

CVE-2025-62221

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...