CVE-2026-56172
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
A use-after-free vulnerability in the Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could exploit this to escalate privileges and take control of the system.
Recommendation
Apply the latest Windows security updates.
Other vulnerabilities in Windows VHD miniport driver
See all- CVE-2026-109453High
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-102220High
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69611High
Use after free in the Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-58601High
In Windows Virtual Hard Disk (VHD) Miniport Driver, a heap-based buffer overflow vulnerability allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS