#permission-re-delegation

CVE-2026-73014 (PLUSONE): Reading Another User’s Files Through the Windows Data Sharing Service

A standard user gets the contents of a file its own permissions deny, because another user who also could not read it added them to a sharing token.