CVE-2026-88106
7.0HighPublished 13 Oct 2026 · NVD status: Undergoing Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-416
Impact
A local attacker with an existing account can gain elevated system privileges. They need local code execution to trigger the flaw.
Root cause
A use-after-free condition exists in the Windows Cloud Files Mini Filter Driver (cldflt.sys).
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Install the Microsoft security update addressing this vulnerability once released. No interim workaround or configuration change is documented.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.