PatchSiren cyber security CVE debrief
CVE-2026-42828 Microsoft CVE debrief
CVE-2026-42828 is a HIGH severity vulnerability in the Windows Projected File System Filter Driver. A buffer over-read issue exists that allows an authorized attacker to elevate privileges locally. The vulnerability has a CVSS score of 7.8.
- Vendor
- Microsoft
- Product
- Windows 10 Version 1809
- CVSS
- HIGH 7.8
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-06-09
- Original CVE updated
- 2026-06-10
- Advisory published
- 2026-06-09
- Advisory updated
- 2026-06-10
Who should care
Administrators and users of affected Microsoft Windows versions should prioritize patching this vulnerability to prevent local privilege escalation attacks.
Technical summary
The vulnerability is caused by a buffer over-read in the Windows Projected File System Filter Driver. This allows an authorized attacker to elevate privileges locally. The Common Vulnerabilities and Exposures (CVE) score is 7.8, indicating a HIGH severity level.
Defensive priority
High
Recommended defensive actions
- Apply patches from Microsoft as soon as possible.
- Review and update vulnerability management processes to ensure timely patching of critical vulnerabilities.
- Monitor systems for indicators of compromise related to this vulnerability.
Evidence notes
The CVE-2026-42828 vulnerability was published on 2026-06-09T17:17:08.860Z and modified on 2026-06-10T19:56:55.857Z. It affects multiple versions of Microsoft Windows.
Official resources
-
CVE-2026-42828 CVE record
CVE.org
-
CVE-2026-42828 NVD detail
NVD
-
Source item URL
nvd_modified
-
Mitigation or vendor reference
[email protected] - Vendor Advisory
CVE-2026-42828 was published on 2026-06-09T17:17:08.860Z and modified on 2026-06-10T19:56:55.857Z.