305 matches found
Microsoft Windows Cloud Files Mini Filter Driver CldiStreamPrepareRequestForMoreProcessing Type Confusion vulnerability
Summary A type confusion vulnerability exists in the CldiStreamPrepareRequestForMoreProcessing functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800 and 10.0.26100.8655 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls ca...
DEMO-Proof-of-Concept-Temporal-Memory-Inconsistency-in-cldflt.sys-CVE-2025-62221
cldflt.sys における時間的メモリ不整合の技術分析と概念実証（CVE-2025-62221） デモ 概念実証: cldflt.sys における時間的メモリ不整合（CVE-2025-62221）CVE-2025-62221: このリポジトリは、垂直方向の権限昇格ベクターに関する包括的な技術分析と概念実証（PoC）デモを提供します。この脆弱性は、Windows Cloud Files ミニフィルタードライバー（cldflt.sys） 内に存在する Use-After-Free（UAF） プリミティブとして識別されています。本ドキュメントでは、特権のないユーザーモードエンティティが...
miniplasma-advisory
MiniPlasma - 脆弱性保護アドバイザリ Windows Cloud Files ミニ フィルター ドライバー cldflt.sys に影響を及ぼす CVE-2020-17103 の MiniPlasma 亜種に対する技術的緩和アドバイザリ。 著者: Rafael França - Microsoft Cybersecurity Architect CSA、Customer Success Unit CSU 保護アドバイザリのダウンロード PDF...
CVE-2026-83991
Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally...
CVE-2026-80093
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69279
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-73359
Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally...
CVE-2026-83991
CVE-2026-83991 affects the Windows Cloud Files Mini Filter Driver , where a missing authentication check on a critical function allows a locally authenticated attacker to perform tampering . The vulnerability is rated CVSS 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges re...
CVE-2026-80093
A use-after-free flaw in the Windows Cloud Files Mini Filter Driver allows an authorized local attacker to achieve privilege escalation . The vulnerability is rated CVSS 7.0 (HIGH) with a local attack vector, high complexity, and low privileges required, impacting confidentiality, integrity, and ...
CVE-2026-69279
CVE-2026-69279 is a use after free vulnerability in the Windows Cloud Files Mini Filter Driver that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexity but...
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-80093: Use After Free
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
PT-2026-87326
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69279: Use After Free
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-83991: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally...
PT-2026-88050
Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A type confusion and use-after-free issue exists in the Windows Cloud Files driver cldflt.sys, used by features like OneDrive Files On-Demand. The flaw is cause...
PT-2026-88138
🚨 CVE-2026-83991 Windows Cloud Files GENERIC WRITE: ACCESS DENIED DeleteFileW: ACCESS DENIED CfCreatePlaceholders with supersede: S OK same file. same token. leaf DACL said no. sync root path did not care. turns a read-only file into a cloud placeholder. writeup + PoC by karollooool:...