Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Use after free in Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) allows an authorized attacker to elevate privileges locally.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 14 products
| Date | Total | Labels |
|---|
| 2026-04-14 | 1 | General1 |
| 2026-04-17 | 1 | Disclosure1 |
CVE-2026-27917 Use after free in Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) allows an authorized attacker to elevate privileges locally. https://www.cve.org/CVERecord?id=CVE-2026-27917
Post summary
The post announces a newly disclosed use‑after‑free vulnerability in Windows WFP NDIS Lightweight Filter Driver that permits local privilege escalation.
🪟 CVE-2026-27917: Windows WFP NDIS filter gets an EoP. Translation: even the firewall’s wearing a trench coat. That “confidence” score is your clue whether to panic or just patch. https://windowsforum.com/threads/cve-2026-27917-wfplwfs-sys-wfp-ndis-driver-eop-and-microsoft-confidence-explained.412738/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #LocalPrivilegeEscalation #WindowsDriverSecurity #Cve202627917
Post summary
The post highlights the CVE‑2026‑27917 as a Windows WFP NDIS filter local privilege escalation issue, noting a confidence score but providing no PoC, exploit code, active exploitation evidence, or patch details.
24 of 24 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | microsoft | windows_10_1607 | - | - | x64 |
| OS | microsoft | windows_10_1607 | - | - | x86 |
| OS | microsoft | windows_10_1809 | - | - | x64 |
| OS | microsoft | windows_10_1809 | - | - | x86 |
| OS | microsoft | windows_10_21h2 | - | - | arm64 |
| OS | microsoft | windows_10_21h2 | - | - | x64 |
| OS | microsoft | windows_10_21h2 | - | - | x86 |
| OS | microsoft | windows_10_22h2 | - | - | arm64 |
| OS | microsoft | windows_10_22h2 | - | - | x64 |
| OS | microsoft | windows_10_22h2 | - | - | x86 |
| OS | microsoft | windows_11_23h2 | - | - | arm64 |
| OS | microsoft | windows_11_23h2 | - | - | x64 |
| OS | microsoft | windows_11_24h2 | - | - | arm64 |
| OS | microsoft | windows_11_24h2 | - | - | x64 |
| OS | microsoft | windows_11_25h2 | - | - | arm64 |
| OS | microsoft | windows_11_25h2 | - | - | x64 |
| OS | microsoft | windows_11_26h1 | - | - | arm64 |
| OS | microsoft | windows_11_26h1 | - | - | x64 |
| OS | microsoft | windows_server_2012 | r2 | - | - |
| OS | microsoft | windows_server_2016 | - | - | - |
| OS | microsoft | windows_server_2019 | - | - | - |
| OS | microsoft | windows_server_2022 | - | - | - |
| OS | microsoft | windows_server_2022_23h2 | - | - | - |
| OS | microsoft | windows_server_2025 | - | - | - |