CVE-2026-20857

High

Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

secure@microsoft.com·CWE-822·Published 2026-01-13

CVSS

7.8

EPSS

0.00

KEV

Exploits

cve.orgen

132 chars

Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

NVDen

132 chars

Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

NVDes

167 chars

Desreferencia de puntero no confiable en el controlador de minifiltro de archivos en la nube de Windows permite a un atacante autorizado elevar privilegios localmente.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	7.8	—	—	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
3.1	Secondary	NVD	7.8	1.8	5.9