libvhdi

libvhdi is a library to access the Virtual Hard Disk VHD image format. Project information: Status: alpha Licence: LGPL-3.0-or-later Read supported formats: Virtual Hard Disk version 1 VHD Virtual Hard Disk version 2 VHDX Supported image types: Fixed-size hard disk image Dynamic-size or sparse ha...

CVE-2026-103555

A Heap-based buffer overflow exists in the Virtual Hard Disk (VHD) Miniport Driver . This vulnerability allows an authorized attacker to perform a local privilege escalation . While the CVSS score indicates a high impact on confidentiality, integrity, and availability, no specific exploit links o...

CVE-2026-109453

A heap-based buffer overflow exists in the Virtual Hard Disk (VHD) Miniport Driver , which could allow an authorized attacker to perform a local elevation of privilege . The vulnerability is rated with a high base severity score of 7.0. No specific exploit details or remediation steps are provide...

CVE-2026-102220

A use after free vulnerability in the Windows VHD miniport driver allows an authorized attacker to achieve local privilege elevation . While the technical details of the root cause are limited to the vulnerability type, the impact includes high confidentiality, integrity, and availability consequ...

CVE-2026-70252

A use after free vulnerability exists in the Virtual Hard Disk (VHD) Miniport Driver . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific technical root cause or affected versions are not detailed beyond the driver name, the vulnerability is categor...

cve-2025-24985

cve-2025-24985 Compute the number of cluster of a VHD file to detect overflow. Supportted boot sectors: MBR GPT Usage python -m cve202524985 -f Setup Nix With direnv: direnv allow Or Without direnv: nix develop Peotry WIP Docker WIP TODO: Auto build libvhdi with poetry Setup poetry install Fix...

Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

Use after free in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

frostbyte

FrostByte Progolue: In the past few days I've been experimenting with the AppDomain manager injection technique had a decent success with it in my previous Red Team engagements against certain EDRs. Although, this is really good for initial access vector, I wanted to release a POC which will help...

CVE-2015-1769

CVE-2015-1769 PoC for CVE-2015-1769 VHD file to reproduce CVE-2015-1769. VHD doesn't contain actual payload only notepad.exe. Upon mounting inspect system log for reported blocked error if latest patch is installed. Batch script shows how symbolic link was created that triggers the vulnerability...

Volumiser

Volumiser Introduction Volumiser is a command line tool and interactive console GUI for listing, browsing and extracting files from common virtual machine hard disk image formats. The tool was written to combat a regular problem where massive 100G+ disk images are often hard to work with or...

The vulnerability of the Virtual Hard Disk (VHD) Miniport Driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Virtual Hard Disk VHD Miniport Driver for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2026-81355

Heap-based buffer overflow in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to execute code locally...

CVE-2026-70574

Out-of-bounds read in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69681

Heap-based buffer overflow in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges over a network...

CVE-2026-69611

Use after free in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69549

Out-of-bounds read in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69541

Heap-based buffer overflow in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69384

Null pointer dereference in Virtual Hard Disk VHD Miniport Driver allows an unauthorized attacker to deny service locally...

CVE-2026-56172

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally...

CVE-2026-70574

CVE-2026-70574 is an out-of-bounds read vulnerability in the Virtual Hard Disk (VHD) Miniport Driver (Microsoft). An attacker with low local privileges can exploit this to elevate privileges to high integrity, resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1:...