This vulnerability (CVE-2026-26184) involves a buffer over-read in the Windows Projected File System on Windows 10 Version 1809 (build 10.0.17763.0). An authorized attacker with local access can leverage this flaw to elevate their privileges on the affected system. The vulnerability is classified under CWE-126 (Buffer Over-read) and has a CVSS v3.1 base score of 7.8, indicating high severity. Microsoft has published an official fix for this vulnerability, as detailed in their security update guide.

Successful exploitation of this vulnerability could allow a local attacker with authorized access to read memory beyond the intended buffer boundaries, potentially leading to privilege escalation. This could result in the attacker gaining higher system privileges, compromising system integrity and confidentiality. There are no reports of active exploitation in the wild.

Microsoft has released an official security update that addresses this vulnerability. It is recommended to apply the provided patch from the Microsoft Update Guide (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26184) to remediate this issue. Since this is a local privilege escalation vulnerability, applying the official fix will prevent exploitation.