Microsoft Windows Cloud Files Mini Filter Driver CldiStreamPrepareRequestForMoreProcessing Type Confusion vulnerability

Summary A type confusion vulnerability exists in the CldiStreamPrepareRequestForMoreProcessing functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800 and 10.0.26100.8655 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls ca...

CVE-2026-41091-PoC-Exploit

☀️ CVE-2026-41091 - RedSun SolarFlare - Microsoft Defender 本地权限提升漏洞 Microsoft Defender 链接跟随漏洞 - 本地权限提升至 NT AUTHORITY\SYSTEM 该漏洞被称为 "RedSun" 🎯，"SolarFlare" 是我给我的漏洞利用取的名字。 ✅ 📌 概述 此仓库包含针对 CVE-2026-41091 （Microsoft Defender / Microsoft 恶意软件防护引擎中的关键本地权限提升漏洞）的完整工作概念验证 PoC 漏洞利用。通过利用不正确的链接解析...

MiniPlasma-Runner

MiniPlasma-Runner 修改自 Nightmare-Eclipse/MiniPlasma（CVE-2020-17103）的版本，适配 C2 使用。 原始 PoC 仅从磁盘运行。此版本通过执行程序集完全在内存中运行，采用拆分二进制方法以避免检测。 免责声明 本工具仅用于授权安全测试和教育目的。在未获得明确书面许可的情况下使用本工具攻击系统是非法且不道德的。作者不对因使用本工具而导致的滥用或损害承担责任。进行任何安全测试前请务必获得适当授权。 变更内容 将多进程阶段重构为单进程线程执行（不再通过 Assembly.Location 自行重启动） 移除了会终止宿主进程的...

miniplasma-advisory

MiniPlasma - Aviso de protección contra vulnerabilidades Aviso técnico de mitigación para la variante MiniPlasma de CVE-2020-17103 que afecta al controlador de mini-filtro de Windows Cloud Files cldflt.sys. Autor: Rafael França - Arquitecto de Ciberseguridad de Microsoft CSA, Unidad de Éxito del...

CVE-2026-83991-writeup-and-poc

El archivo dijo no. Cloud Files dijo que lo reemplazaba. CVE-2026-83991 es una vulnerabilidad de manipulación de Windows Cloud Files cuyo rango afectado publicado comienza con Windows 10 versión 1809, casi ocho años antes de la corrección de septiembre de 2026. Le pedí a Windows que abriera un...

The vulnerability of the Windows Cloud Files Mini Filter Driver for operating systems allows attackers to bypass existing security mechanisms and compromise the integrity of protected information.

The vulnerability of the Windows Cloud Files Mini Filter Driver for operating systems affects the lack of authentication for a critical function. Exploiting this vulnerability can allow attackers to bypass existing security mechanisms and compromise the integrity of the protected information...

Exploit for CVE-2026-83991

The File Said No. Cloud Files Said Supersede. CVE-2026-8...

CVE-2026-83991

Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally...

CVE-2026-80093

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69279

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-83991

CVE-2026-83991 affects the Windows Cloud Files Mini Filter Driver , where a missing authentication check on a critical function allows a locally authenticated attacker to perform tampering . The vulnerability is rated CVSS 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges re...

EUVD-2026-73359

Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally...

CVE-2026-80093

A use-after-free flaw in the Windows Cloud Files Mini Filter Driver allows an authorized local attacker to achieve privilege escalation . The vulnerability is rated CVSS 7.0 (HIGH) with a local attack vector, high complexity, and low privileges required, impacting confidentiality, integrity, and ...

EUVD-2026-73326

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69279

CVE-2026-69279 is a use after free vulnerability in the Windows Cloud Files Mini Filter Driver that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexity but...

EUVD-2026-73216

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

PT-2026-87326

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

PT-2026-88050

🚨 HIGH SEVERITY: CVE-2026-80093 CVSS 7.0 Use-after-free flaw in Windows Cloud Files Mini Filter Driver enables local privilege escalation. Authenticated attackers can exploit this to gain elevated system access. CVE Vulnerability PatchNow ThreatIntel https://t.co/g9Izp9IuKJ...