This vulnerability involves a use-after-free condition in the Windows Projected File System on Windows 10 Version 1809 (build 10.0.17763.0). An authorized attacker with local access can exploit this flaw to elevate their privileges. The CVSS v3.1 base score is 7.0, indicating high severity, with attack vector local, high attack complexity, low privileges required, no user interaction, and impacts to confidentiality, integrity, and availability. Microsoft has released an official fix for this vulnerability as documented in their security update guide.

Successful exploitation allows an authorized local attacker to elevate their privileges, potentially gaining higher system rights. This can lead to full system compromise depending on the privileges escalated. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft security update guide for CVE-2026-34340 to remediate this vulnerability.