Microsoft’s entry for CVE-2026-27917 frames the issue as a Windows WFP NDIS Lightweight Filter Driver elevation-of-privilege flaw in wfplwfs.sys, and the confidence metric attached to the advisory is the key clue for defenders. In Microsoft’s terminology, that metric reflects how certain the...