CVE-2026-77572

In VeraCrypt versions 1.26.29 and earlier on Windows, a vulnerability exists in the veracrypt.sys driver due to missing authorization on specific metadata IOCTL handlers. A local user capable of opening the .\VeraCrypt device can exploit handlers such as TC_IOCTL_GET_RESOLVED_SYMLINK and VC_IOCTL...