Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

A flaw in Windows Cloud Files Mini Filter Driver allows an attacker with local access to run code with higher privileges than their account normally permits. This is dangerous because it can let an attacker take full control of a computer.

A privilege escalation vulnerability exists in the Windows Cloud Files Mini Filter Driver (CWE-122: heap buffer overflow) that can be exploited by a local authenticated attacker to execute arbitrary code with SYSTEM privileges. The vulnerability requires local code execution context but does not require additional user interaction.