EUVD-2026-73425

Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally...

EUVD-2026-73403

Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network...

CVE-2026-68839

CVE-2026-68839 is a heap-based buffer overflow in the Windows USB Mass Storage Class Driver , allowing an unauthorized attacker to execute code over a network. Microsoft rates it CRITICAL with a CVSS 3.1 score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating network-exploitable, no privil...

EUVD-2026-73348

Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally...

CVE-2026-72937

This is an out-of-bounds read vulnerability in the Windows Storage Port Driver that allows an authorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, low complexity, and low privileges required, resulting in high confidentiality impact wit...

EUVD-2026-73264

Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally...

CVE-2026-77492

CVE-2026-77492 is an out-of-bounds read vulnerability in the Windows Storage Port Driver that allows an authorized attacker to disclose information locally . The CVSS 3.1 score is 5.5 (MEDIUM) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating a local attack requiring low privileges ...

EUVD-2026-73120

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally...

EUVD-2026-73121

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally...

CVE-2026-68877

CVE-2026-68877 is a heap-based buffer overflow in Windows Storage Spaces Controller that allows an authorized local attacker (low privileges, no user interaction) to achieve code execution with high impact on confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH ). CISA's SSVC assessme...

CVE-2026-68844

CVE-2026-68844 is a heap-based buffer overflow in Windows Storage Spaces Controller that allows an authorized, locally authenticated attacker (with low privileges) to achieve remote code execution . The vulnerability carries a CVSS 3.1 base score of 7.8 (HIGH) with high impact on confidentiality,...

EUVD-2026-73111

Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-72946

CVE-2026-72946 is a heap-based buffer overflow in Microsoft's Storage Port Driver that allows an authorized attacker with local access to elevate privileges , achieving high impact on confidentiality, integrity, and availability. The vulnerability requires low privileges and no user interaction (...

EUVD-2026-73092

Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...

CVE-2026-71337

CVE-2026-71337 is a stack-based buffer overflow in the Windows Storage Management Provider that allows a locally authenticated attacker with low privileges to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) , reflecting local attack vector, low complexity, and high impact to...

EUVD-2026-73005

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally...

CVE-2026-69527

An out-of-bounds read vulnerability in the Windows USB Mass Storage Class Driver allows an authorized local attacker to disclose information. The CVSS v3.1 score is 5.5 (Medium) with a local attack vector, low privileges required, and high confidentiality impact. CISA's SSVC assessment indicates ...

EUVD-2026-73233

Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...

CVE-2026-69389

This CVE describes a heap-based buffer overflow in Windows Storage Management Provider that allows an authorized, low-privileged attacker to achieve local privilege escalation . The vulnerability requires no user interaction and carries a CVSS 3.1 base score of 7.8 (HIGH) with high impact across ...

CVE-2026-82071 Insufficient Validation of Storage Engine Configuration Options in MongoDB Server Leads to Out-of-Bounds Write

Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted parameters during collection creation that override internal storage metadata. This results in an out-of-bounds memory write in the server process...