543 matches found
The vulnerability of the Windows Storage component in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the Windows Storage component in operating systems involves the use of an insecure search path. Exploiting this vulnerability can allow attackers to gain increased privileges...
CVE-2026-78516
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally...
CVE-2026-69575
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...
CVE-2026-69328
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally...
CVE-2026-69381
CVE-2026-69381 is an out-of-bounds read in the Windows Storage Port Driver that allows an unauthorized attacker with physical access to disclose information. The vulnerability requires no prior privileges or user interaction, but the physical attack vector limits its practical exploitability. The...
EUVD-2026-73821
Buffer over-read in Windows Storage allows an unauthorized attacker to disclose information with a physical attack...
CVE-2026-78516
CVE-2026-78516 is a buffer over-read in Windows Storage that allows an unauthorized attacker with physical access to disclose sensitive information. The vulnerability requires user interaction and no prior privileges. Microsoft rates it CVSS 4.3 (Medium) with a High confidentiality impact but no ...
CVE-2026-69568
CVE-2026-69568 is an out-of-bounds read vulnerability in the Windows Storage Spaces Controller component. An authorized attacker with local access and low privileges can exploit this flaw to achieve information disclosure (high confidentiality impact, no integrity or availability impact). The CVS...
EUVD-2026-73683
Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...
EUVD-2026-73458
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally...
CVE-2026-69328
CVE-2026-69328 is an untrusted search path vulnerability in Windows Storage that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity, no user interaction required, and high...
CVE-2026-68844
CVE-2026-68844 is a heap-based buffer overflow in Windows Storage Spaces Controller that allows an authorized, locally authenticated attacker (with low privileges) to achieve remote code execution . The vulnerability carries a CVSS 3.1 base score of 7.8 (HIGH) with high impact on confidentiality,...
Windows Storage Elevation of Privilege Vulnerability
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally...
Windows Storage Information Disclosure Vulnerability
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally...
CVE-2026-69290: Stack-based Buffer Overflow
Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...
CVE-2026-78516: Buffer Over-read
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally...
PT-2026-88020
Name of the Vulnerable Software and Affected Versions Windows Storage affected versions not specified Description A buffer over-read in Windows Storage allows an unauthorized attacker to disclose sensitive information and affect the system through a physical attack. A buffer over-read occurs when...
CVE-2026-69575: Use After Free
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...