CVE-2026-77904

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69432

Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69418

Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network...

CVE-2026-69407

Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69407

CVE-2026-69407 is an integer overflow or wraparound vulnerability in the Microsoft Volume Manager Driver that allows an authorized attacker to escalate privileges locally . The vulnerability is rated CVSS 3.1 7.8 (HIGH) with a local attack vector, low complexity, low privileges required, and high...

EUVD-2026-73491

Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69468

CVE-2026-69468 is a heap-based buffer overflow in the Windows Volume Manager Extension Driver that allows a locally authenticated attacker to elevate privileges . Microsoft rates the vulnerability CVSS 3.1: 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requ...

CVE-2026-69432

CVE-2026-69432 is a heap-based buffer overflow in the Volume Manager Driver (Microsoft) that allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 3.1 7.8 (High) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local attack vector, low compl...

EUVD-2026-72975

Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges locally...

EUVD-2026-72964

Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network...

CVE-2026-69418

Volume Manager Driver contains a heap-based buffer overflow that allows an authorized attacker to elevate privileges over a network. The vulnerability is rated CVSS 3.1: 8.0 (HIGH) with low attack complexity, low privileges required, and user interaction needed, yielding high impact to confidenti...

Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...

Volume Manager Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network...

Volume Manager Driver Elevation of Privilege Vulnerability

Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally...

August 8, 2017—KB4034672 (Security-only update)

None None...

The vulnerability of the Windows operating system, allowing a hacker to read arbitrary files on the disk

The vulnerability of the Volume Manager Driver in the Windows operating system is related to the lack of user verification when accessing the RemoteFX RDP USB function. Exploiting this vulnerability allows a malicious actor to read arbitrary files from the disk by making requests to RemoteFX...

The vulnerability of the Windows operating system, which allows a hacker to read arbitrary files from the disk

The vulnerability of the Volume Manager Driver in the Windows operating system is related to the lack of user verification when accessing the RemoteFX RDP USB function. Exploiting this vulnerability allows an attacker, acting locally, to read arbitrary files from the disk by making requests to...

CVE-2016-0190

Volume Manager Driver in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 does not properly check whether RemoteFX RDP USB disk accesses originate from the user who mounted a disk, which allows local users to read arbitrary files on these disks via RemoteFX requests, aka...

MS16-067: Security Update for Volume Manager Driver (3155784)

The remote Windows host is missing a security update. It is, therefore, affected by an information disclosure vulnerability due to a failure to correctly tie the session of the mounting user to the USB disk being mounted. This issue occurs when the USB disk is mounted over the Remote Desktop...