Local privilege escalation via integer overflow

Privilege escalation in Windows Projected File System in Microsoft Windows allows local users to gain SYSTEM privileges via integer overflow. Microsoft has disclosed only that Projected File System mishandles arithmetic and has not publicly identified the affected function, code path, or attacker-controlled value that wraps. Exploitation requires local code execution with low privileges on an affected Windows 10, Windows 11, or Windows Server host, and retrieved records did not show a public exploit or observed in-the-wild use.