PULSEUnderground Intel

LIVE19signals / 24h

FEED

ransomemperador reclama a MPI LTDA · BR · Otherransomspacebears reclama a Alma Center Servizi Medicali S.r.l. · IT · Healthcareransomspacebears reclama a Holistic Health Group, Inc. (d/b/a Suncrafted) · US · Healthcareransomn0n reclama a Company #69 · Not Foundransomiah6477 reclama a alera · Professional Servicesransomn0n reclama a Company #68 · US · Not Foundransomn0n reclama a Company #67 · NL · Not Foundransomn0n reclama a Company #66 · Not Foundransomn0n reclama a Interior Technologies · Technologyransomeclipse reclama a Taiwan Otsuka Pharmaceutical · TW · Healthcareransomeclipse reclama a japantimes.co.jp · JP · Otherransomakira reclama a FOODMatch · Agriculture and Food Productionransomakira reclama a Shediac Lobster Shop · CA · Retail & E-Commerceransomakira reclama a Torns Enterprises · Not Foundransomemperador reclama a MPI LTDA · BR · Otherransomspacebears reclama a Alma Center Servizi Medicali S.r.l. · IT · Healthcareransomspacebears reclama a Holistic Health Group, Inc. (d/b/a Suncrafted) · US · Healthcareransomn0n reclama a Company #69 · Not Foundransomiah6477 reclama a alera · Professional Servicesransomn0n reclama a Company #68 · US · Not Foundransomn0n reclama a Company #67 · NL · Not Foundransomn0n reclama a Company #66 · Not Foundransomn0n reclama a Interior Technologies · Technologyransomeclipse reclama a Taiwan Otsuka Pharmaceutical · TW · Healthcareransomeclipse reclama a japantimes.co.jp · JP · Otherransomakira reclama a FOODMatch · Agriculture and Food Productionransomakira reclama a Shediac Lobster Shop · CA · Retail & E-Commerceransomakira reclama a Torns Enterprises · Not Found

CVE WatchOct 13, 2026

CVE-2026-85328

Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.

CVSS

7.0

High

EPSS

0.2%

p12

KEV

—

Exploit Today

4

0-100

Published: Oct 13, 2026 · Last modified: Oct 13, 2026 · CWE-1390

EPSS · 30d

Not enough EPSS history yet.

Technical description

Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.

Official references

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85328

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-881017.8 HIG

——3Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.2d CVE-2026-859395.3 MED

——9Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.2d CVE-2026-859227.4 HIG

——13Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.1d CVE-2026-853767.8 HIG

——6Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.2d CVE-2026-853236.8 MED

——12Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network.2d CVE-2026-838407.8 HIG

——7Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally.2d