CVE-2026-109453
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
Risk Assessment
The risk is that an authorized attacker can elevate privileges locally, potentially leading to full system compromise.
Recommendation
It is recommended to apply the vendor's patch and restrict system access to unauthorized users.
Other vulnerabilities in Windows VHD Miniport Driver
See all- CVE-2026-102220High
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69611High
Use after free in the Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-56172High
A use-after-free vulnerability in the Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-58601High
In Windows Virtual Hard Disk (VHD) Miniport Driver, a heap-based buffer overflow vulnerability allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS