WinFsp Race Condition Vulnerability Leading to Kernel Heap Overflow and Privilege Escalation

A race condition vulnerability has been identified in WinFsp, an open-source Windows File System Proxy, in versions through 2.1.25156. This vulnerability could be exploited to cause a kernel heap overflow, potentially leading to local privilege escalation and granting system-level access.

Impact

Exploitation of this vulnerability could allow an attacker to cause a kernel heap overflow, leading to local privilege escalation and system-level access.

Remediation

Users and administrators are advised to update to WinFsp version 2.2B1 or later.