Description
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Windows 10 Version 1809 | 10.0.17763.0 – < 10.0.17763.8880 | 10.0.17763.8880 |
| Microsoft | Windows 11 version 23H2 | 10.0.22631.0 – < 10.0.22631.7219 | 10.0.22631.7219 |
| Microsoft | Windows 11 Version 24H2 | 10.0.26100.0 – < 10.0.26100.8655 | 10.0.26100.8655 |
| Microsoft | Windows 11 Version 25H2 | 10.0.26200.0 – < 10.0.26200.8655 | 10.0.26200.8655 |
| Microsoft | Windows 11 version 26H1 | 10.0.28000.0 – < 10.0.28000.2269 | 10.0.28000.2269 |
| Microsoft | Windows Server 2019 | 10.0.17763.0 – < 10.0.17763.8880 | 10.0.17763.8880 |
| Microsoft | Windows Server 2019 (Server Core installation) | 10.0.17763.0 – < 10.0.17763.8880 | 10.0.17763.8880 |
| Microsoft | Windows Server 2025 | 10.0.26100.0 – < 10.0.26100.32995 | 10.0.26100.32995 |
| Microsoft | Windows Server 2025 (Server Core installation) | 10.0.26100.0 – < 10.0.26100.32995 | 10.0.26100.32995 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 7 repositories
-
AlexLinov/MiniPlasma-Runner ★ 46 · May 18, 2026
CVE-2020-17103 adapted for C2 with split-binary SYSTEM callback
-
mohammadzarnian1357/MiniPlasma ★ 2 · May 23, 2026
CVE-2020-17103
-
CaptainChicky/MiniPlasma ★ 2 · May 17, 2026
CVE-2020-17103 was apparently not patched or the patch was reversed, regardless this the PoC for an LPE in cldflt.sys
-
arch1m3d/MiniPlasma-Detection ★ 1 · May 18, 2026
Sigma detection rule for MiniPlasma (CVE-2020-17103)
-
ashrafzaryouh/CVE-2020-17103 ★ 0 · Jun 7, 2026
CVE-2020-17103
-
rfranca777/miniplasma-advisory ★ 0 · Jun 4, 2026
MiniPlasma CVE-2020-17103 mitigation advisory
-
dooodad/MiniPlasma ★ 0 · May 21, 2026
CVE-2020-17103 was apparently not patched or the patch was reversed, regardless this the PoC for an LPE in cldflt.sys
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 1
- MSRC-CVE-2020-17103 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Microsoft Security Response Center · Jun 9, 2026
References
- Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability vendor-advisory patch