CVE-2024-49114High· 7.8▾ MidnightPoC availableWindows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 42.9 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.7%
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
windows_10_1809 < 10.0.17763.6659windows_10_21h2 < 10.0.19044.5247windows_10_22h2 < 10.0.19045.5247windows_11_22h2 < 10.0.22621.4602windows_11_24h2 < 10.0.26100.2605windows_server_2019 < 10.0.17763.6659windows_server_2022 < 10.0.20348.2966windows_server_2022_23h2 < 10.0.25398.1308windows_server_2025 < 10.0.26100.2605Upgrade past the affected range:
windows_10_1809 10.0.17763.6659windows_10_21h2 10.0.19044.5247windows_10_22h2 10.0.19045.5247windows_11_22h2 10.0.22621.4602windows_11_24h2 10.0.26100.2605windows_server_2019 10.0.17763.6659windows_server_2022 10.0.20348.2966windows_server_2022_23h2 10.0.25398.1308windows_server_2025 10.0.26100.2605Connected by shared product, vendor, weakness, or advisory.
CVE-2026-58635High· 7.8Improper neutralization of special elements used in a command ('command injection') in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.
CVE-2026-34348Medium· 6.5Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network.
CVE-2026-97816Critical· 9.8Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
CVE-2026-97813Medium· 6.5Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.
CVE-2026-97811High· 7.8Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
CVE-2026-97809High· 7.8Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.