Microsoft Windows UDFS Elevation of Privilege Vulnerability

Vulnerability

An elevation of privilege vulnerability has been identified in the Windows Universal Disk Format File System Driver (UDFS). This vulnerability allows an attacker to gain SYSTEM privileges. It affects multiple Windows versions, including Windows 10, Windows 11, Windows Server 2012, 2016, 2019, 2022, and 2025, as well as Windows Server 2012 R2 and various Windows 11 and Windows 10 versions.

Impact

Exploitation of this vulnerability could lead to unauthorized elevation of privileges, allowing an attacker to gain SYSTEM rights.

Remediation

Users can apply the security update for this vulnerability, which is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5094123, KB5094126, KB5094127, KB5094041, KB5094042, KB5094122, KB5095051, and KB5094125.

Added: Jun 9, 2026, 8:18 PM
Updated: Jun 9, 2026, 8:18 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
7.5
exploitability
3.3
remediation
7.7
relevance
9.7
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.