EUVD-2026-56652

Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally...

CVE-2026-62751

CVE-2026-62751 describes an integer overflow or wraparound in Windows Projected File System that enables a locally authenticated attacker to elevate privileges. The entry cites a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and privileges required as LOW; im...

CVE-2026-62751 Windows Projected File System Elevation of Privilege Vulnerability

...

CVE-2026-62751 Windows Projected File System Elevation of Privilege Vulnerability

...

Windows Projected File System Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally...

CVE-2026-62751: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally...

PT-2026-70511

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description An integer overflow or wraparound occurs in the Windows Projected File System, which allows an authorized attacker to elevate privileges locally. Recommendations At the...

The vulnerability of the Projected File System (ProjFS) file system in Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Projected File System ProjFS in Windows operating systems is related to the incorrect definition of symbolic links before accessing files. Exploiting this vulnerability can allow an attacker to enhance their privileges...

EUVD-2026-43942

Improper link resolution before file access 'link following' in Windows Projected File System allows an authorized attacker to elevate privileges locally...

CVE-2026-50469

Improper link resolution before file access 'link following' in Windows Projected File System allows an authorized attacker to elevate privileges locally...

CVE-2026-50469 Windows Projected File System Elevation of Privilege Vulnerability

...

CVE-2026-50469

CVE-2026-50469 affects Windows Projected File System. The flaw is an improper link resolution before file access (link following) that enables an authenticated local attacker to elevate privileges. Documented impact is privilege escalation with a CVSS 3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H score...

CVE-2026-50469 Windows Projected File System Elevation of Privilege Vulnerability

...

Windows Projected File System Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Projected File System allows an authorized attacker to elevate privileges locally...

PT-2026-58445

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At...

CVE-2026-50469: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Projected File System allows an authorized attacker to elevate privileges locally...

CVE-2026-41721

A flaw was found in Spring Data Commons. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP request when Spring Data Web Support is enabled with a Controller method using @ProjectedPayload. This can cause the application to allocate excessive memory, leading to a...

Fission builder pods auto-mount the fission-builder ServiceAccount token in the user-supplied builder container

Summary Fission builder pods were created with ServiceAccountName: fission-builder and no AutomountServiceAccountToken: false, so the kubelet auto-mounted the service-account token into every container in the pod — including the user-supplied builder image. Details The user controls the builder...

GHSA-8WCJ-MFRC-JX5Q Fission builder pods auto-mount the fission-builder ServiceAccount token in the user-supplied builder container

Summary Fission builder pods were created with ServiceAccountName: fission-builder and no AutomountServiceAccountToken: false, so the kubelet auto-mounted the service-account token into every container in the pod — including the user-supplied builder image. Details The user controls the builder...

The vulnerability of the Projected File System component in Windows operating systems, which allows attackers to enhance their privileges

The vulnerability of the Projected File System component in Windows operating systems relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...