CVE Catalog
CVE-2026-49168
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk0.31%
23th percentile - higher than 23% of all known CVEs
Summary
Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to elevate privileges via a physical attack.
Risk Assessment
An attacker with physical access can gain elevated privileges, threatening the integrity and confidentiality of data stored in Storage Spaces.
Recommendation
Install the latest Windows security updates; restrict physical access to devices.
Other vulnerabilities in Windows Storage Spaces Direct
Original NVD description (English source)
Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to elevate privileges with a physical attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS