High · 7.8 CVE-2026-20940 EUVD-2026-2120GHSA-w443-wrpg-p5mh

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Published Jan 13, 2026 · Updated Jul 30, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Windows 10 Version 1607 Product: Windows 10 Version 1809 Product: Windows 10 Version 21H2 Product: Windows 10 Version 22H2 Product: Windows 11 version 23H2 Product: Windows Server 2008 R2 Service Pack 1 Product: Windows Server 2008 R2 Service Pack 1 (Server Core installation) Product: Windows Server 2008 Service Pack 2 Product: Windows Server 2008 Service Pack 2 (Server Core installation) Product: Windows Server 2012 Product: Windows Server 2012 (Server Core installation) Product: Windows Server 2012 R2 Product: Windows Server 2012 R2 (Server Core installation) Product: Windows Server 2016 Product: Windows Server 2016 (Server Core installation) Product: Windows Server 2019 Product: Windows Server 2019 (Server Core installation) Product: Windows Server 2022 Platform: Windows

Description

Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Windows 10 Version 1607	10.0.14393.0 – < 10.0.14393.8783	10.0.14393.8783
Microsoft	Windows 10 Version 1809	10.0.17763.0 – < 10.0.17763.8276	10.0.17763.8276
Microsoft	Windows 10 Version 21H2	10.0.19044.0 – < 10.0.19044.6809	10.0.19044.6809
Microsoft	Windows 10 Version 22H2	10.0.19045.0 – < 10.0.19045.6809	10.0.19045.6809
Microsoft	Windows 11 version 23H2	10.0.22631.0 – < 10.0.22631.6491	10.0.22631.6491
Microsoft	Windows Server 2008 R2 Service Pack 1	6.1.7601.0 – < 6.1.7601.28117	6.1.7601.28117
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	6.1.7601.0 – < 6.1.7601.28117	6.1.7601.28117
Microsoft	Windows Server 2008 Service Pack 2	6.0.6003.0 – < 6.0.6003.23717	6.0.6003.23717
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	6.0.6003.0 – < 6.0.6003.23717	6.0.6003.23717
Microsoft	Windows Server 2012	6.2.9200.0 – < 6.2.9200.25868	6.2.9200.25868
Microsoft	Windows Server 2012 (Server Core installation)	6.2.9200.0 – < 6.2.9200.25868	6.2.9200.25868
Microsoft	Windows Server 2012 R2	6.3.9600.0 – < 6.3.9600.22968	6.3.9600.22968
Microsoft	Windows Server 2012 R2 (Server Core installation)	6.3.9600.0 – < 6.3.9600.22968	6.3.9600.22968
Microsoft	Windows Server 2016	10.0.14393.0 – < 10.0.14393.8783	10.0.14393.8783
Microsoft	Windows Server 2016 (Server Core installation)	10.0.14393.0 – < 10.0.14393.8783	10.0.14393.8783
Microsoft	Windows Server 2019	10.0.17763.0 – < 10.0.17763.8276	10.0.17763.8276
Microsoft	Windows Server 2019 (Server Core installation)	10.0.17763.0 – < 10.0.17763.8276	10.0.17763.8276
Microsoft	Windows Server 2022	10.0.20348.0 – < 10.0.20348.4648	10.0.20348.4648

Advisories 3

NCSC-2026-0007 Kwetsbaarheden verholpen in Microsoft Windows NCSC-NL (Netherlands) · Apr 10, 2026
WID-SEC-2026-0083 Microsoft Windows : Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 2, 2026
MSRC-CVE-2026-20940 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Microsoft Security Response Center · Jan 13, 2026

References

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability vendor-advisory patch