687 matches found
EUVD-2026-100345
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...
EUVD-2026-100340
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack...
CVE-2026-88226
An out-of-bounds read vulnerability exists in the Windows Storage Port Driver . This flaw allows an unauthorized attacker to disclose information, but it requires a physical attack to exploit. The vulnerability is associated with CWE-125 . No specific exploit details or in-the-wild exploitation i...
EUVD-2026-100346
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...
EUVD-2026-100344
Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-102189
A heap-based buffer overflow vulnerability exists in Windows Storage . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.0 and is categorized under CWE-122 . No specific exploit information or technical remediation details ...
CVE-2026-102188
The Windows Storage Port Driver is vulnerable to an untrusted pointer dereference (CWE-822). This flaw allows an unauthorized attacker to achieve privilege elevation through a physical attack . While the CVSS v3.1 score indicates a base severity of Medium (6.8) , the impact includes high confiden...
CVE-2026-102191
A heap-based buffer overflow exists in Windows Storage , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 base score of 7.0 (HIGH) . While the documents do not provide specific exploit links or a detailed root cause analysis...
CVE-2026-100216
A stack-based buffer overflow exists in Windows Storage , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a high level of attack complexity and impacts confidentiality, integrity, and availability. An official fix is available;...
EUVD-2026-100337
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...
EUVD-2026-100329
Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...
CVE-2026-100225
A heap-based buffer overflow vulnerability exists in Windows Storage . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified as HIGH severity with an official fix available via Microsoft. No specific exploit details or in-the-wild exploitat...
EUVD-2026-100267
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally...
CVE-2026-96944
A vulnerability in Windows Storage allows an authorized attacker to disclose information locally due to the insertion of sensitive information into an externally-accessible file or directory. This issue is associated with CWE-538 . The vulnerability has a MEDIUM base severity (5.5) with a LOCAL a...
EUVD-2026-100036
Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-85872
A Use after free vulnerability exists in the Windows Storage VSP Driver . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is categorized under CWE-416 . No specific exploit details or remediation instructions are provided in the documents, but t...
CVE-2026-69931
A race condition vulnerability exists in Windows Storage due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege escalation . No specific affected versions, exploit details, or remediation instructions a...
CVE-2026-69856
A Use after free vulnerability exists in Windows Storage , which may allow an authorized attacker to elevate privileges locally . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). No specific exploit information or in-the-wild exploitation details are pro...