This vulnerability involves a use-after-free condition in the Windows Cloud Files Mini Filter Driver component of Windows 10 Version 1809. An authorized local attacker could exploit this flaw to elevate their privileges on the system. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. Microsoft has published an official security update to remediate this vulnerability.

Successful exploitation of this vulnerability could allow an authorized local attacker to gain elevated privileges, potentially leading to full system compromise. The vulnerability affects confidentiality, integrity, and availability of the system. There are no reports of active exploitation in the wild.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33835 to remediate this vulnerability. No additional mitigation steps are indicated by the vendor.