CVE-2026-102188
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
Risk Assessment
Risk includes privilege escalation by an attacker with physical access, potentially leading to system takeover.
Recommendation
Update drivers and secure physical access to hardware.
Other vulnerabilities in Windows Storage Port Driver
See all- CVE-2026-96863Medium
Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack. The flaw requires physical access to the device.
- CVE-2026-88226Medium
An out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
- CVE-2026-72946High
Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69381Medium
The vulnerability in the Windows Storage Port Driver is an out-of-bounds read. It allows an unauthorized attacker to disclose information via a physical attack.
- CVE-2026-65814High
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

