PT-2026-2702 · Microsoft · Windows

Shaowei Yan · Publicado 2026-01-13 · Atualizado 2026-01-15 · CVE-2026-20857

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows (affected versions not specified)

Description An issue exists in the Windows Cloud Files Mini Filter Driver where an untrusted pointer dereference can occur. This can allow a locally authorized attacker to gain elevated privileges. The issue allows attackers to affect the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Untrusted Pointer Dereference

Enumeração de Fraquezas

CWE-822

Identificadores relacionados

BDU:2026-00435

CVE-2026-20857

Produtos afetados

Windows

Referências · 7

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20857 · Aviso do Fabricante
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-20857 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-20857 · Nota de Segurança
• https://bdu.fstec.ru/vul/2026-00435 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20857 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-20857 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2011759669111300317 · Publicação no Twitter