CVE-2026-24283: Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges locally.
Other sources
Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-24283?
CVE-2026-24283 is classified as an elevation of privilege vulnerability that can lead to local privilege escalation.
How do I fix CVE-2026-24283?
To mitigate CVE-2026-24283, apply the latest security updates and patches provided by Microsoft.
Which versions of Windows are affected by CVE-2026-24283?
CVE-2026-24283 affects multiple versions of Windows, including Windows Server 2025, Windows Server 2022, and various editions of Windows 11.
What is the impact of CVE-2026-24283?
If exploited, CVE-2026-24283 allows an authorized attacker to elevate their privileges on the affected system, potentially gaining access to sensitive data.
Is there a workaround for CVE-2026-24283?
Currently, applying the recommended patches is the primary method of remediation for CVE-2026-24283, and no specific workarounds have been provided.