Microsoft shipped an urgent fix on Patch Tuesday for a newly catalogued elevation-of-privilege flaw in the Windows Universal Disk Format File System Driver (UDFS), tracked as CVE-2026-23672, closing a local attack path that could let low‑privilege users escalate to SYSTEM on affected machines...
Microsoft’s Security Update Guide lists CVE-2026-20940 as an elevation-of-privilege (EoP) vulnerability in the Windows Cloud Files Mini Filter Driver, and defenders should treat any new Cloud Files mini-filter entry as a high-priority patch-and-hunt item until proven otherwise. Background /...
Microsoft has recorded CVE-2026-20820 — a heap‑based buffer overflow in the Windows Common Log File System driver (clfs.sys) that Microsoft classifies as an elevation of privilege vulnerability; an authorized local attacker able to run code as a standard user or manipulate CLFS‑read inputs can...