CVE-2026-32074

CVE-2026-32074 is a double free vulnerability in the Windows Projected File System that allows an authorized local attacker to escalate privileges on affected systems. This memory corruption flaw can be exploited without user interaction by a user with local access rights. The vulnerability carries a CVSS v3.1 score of 7.8 (HIGH) with high impact across confidentiality, integrity, and availability, though it requires local access and existing user privileges to exploit. Exploitation status remains low, with no evidence of active exploitation in the wild, no publicly available exploit code, and minimal community attention, as indicated by the CVE not appearing on Microsoft's Known Exploited Vulnerabilities list and remaining inactive on threat intelligence platforms. The EPSS score of 0.000490 suggests this vulnerability currently poses a relatively low probability of exploitation compared to the broader CVE landscape, though the privilege escalation capability warrants timely patching for systems with untrusted local users.