A buffer over-read vulnerability in the Windows Projected File System allows an authorized local user to elevate privileges, posing a significant risk to host integrity.

This vulnerability is a buffer over-read (CWE-126) located within the Windows Projected File System. It requires the attacker to have low-level local privileges to trigger the flaw and successfully elevate their access level.

Successful exploitation grants an attacker elevated privileges on the host system, which may lead to full system compromise. With a CVSS score of 7.8, this vulnerability represents a high-severity risk to business operations, as it facilitates unauthorized lateral movement and the potential exfiltration of sensitive data stored on compromised endpoints.

Immediate Action: Apply the relevant security updates provided by Microsoft in the official update guide to address the underlying buffer over-read.

Proactive Monitoring: Review system access logs for anomalous behavior or unexpected process execution patterns that may indicate an attempt to exploit local system services.

Compensating Controls: Ensure endpoint detection and response (EDR) solutions are configured to monitor for unauthorized privilege escalation attempts and suspicious memory access patterns.

Public Exploit Available: No (exploit_available: unknown)

Given the potential for privilege escalation and the high CVSS score, administrators should prioritize the deployment of the latest Microsoft security patches across all affected Windows environments. Organizations should verify that their patch management cycle includes these specific updates to prevent local attackers from gaining administrative control over vulnerable systems.