{"id":"CVE-2026-113764","kind":"vulnerability","aliases":["CVE-2026-113764"],"related":[],"title":"Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to…","description":"Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to disclose information locally.","summary":null,"severity":"medium","cvss":4.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":[],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:18:55+00:00","first_seen_at":"2026-11-10T19:24:40+00:00","triaged_at":null,"updated_at":"2026-11-10T19:39:26+00:00","category":null,"confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-113764':23A,26A '-2026':22A,25A 'allow':17A,43C 'attack':20A,46C 'author':19A,45C 'check':4A,30C 'condit':11A,37C 'cve':21A,24A 'disclos':48C 'file':15A,41C 'inform':49C 'local':50C 'project':14A,40C 'race':10A,36C 'system':16A,42C 'time':2A,6A,28C,32C 'time-of-check':1A,27C 'time-of-us':5A,31C 'toctou':9A,35C 'use':8A,34C 'window':13A,39C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":[],"ptokens":[],"labels":["medium"],"campaign_type":null,"search_a":"'-113764':23A,26A '-2026':22A,25A 'allow':17A 'attack':20A 'author':19A 'check':4A 'condit':11A 'cve':21A,24A 'file':15A 'project':14A 'race':10A 'system':16A 'time':2A,6A 'time-of-check':1A 'time-of-us':5A 'toctou':9A 'use':8A 'window':13A","search_b":"","search_c":"'allow':43C 'attack':46C 'author':45C 'check':30C 'condit':37C 'disclos':48C 'file':41C 'inform':49C 'local':50C 'project':40C 'race':36C 'system':42C 'time':28C,32C 'time-of-check':27C 'time-of-us':31C 'toctou':35C 'use':34C 'window':39C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:18:55+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113764","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113764","severity":null,"published_at":"2026-11-10T19:18:55+00:00","modified_at":"2026-11-10T19:18:55+00:00","first_seen_at":"2026-11-10T19:24:40+00:00","fetched_at":"2026-11-10T19:24:40+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}