CVE-2026-58526
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
A use-after-free vulnerability in Windows Storage allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could gain higher privileges, potentially leading to full system compromise.
Recommendation
Install the latest Windows security updates from Microsoft.
Other vulnerabilities in Windows Storage
See all- CVE-2025-21391HighActively exploited
Windows Storage Elevation of Privilege Vulnerability.
- CVE-2026-78516Medium
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
- CVE-2026-69328High
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-62695High
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-61359High
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-47648High
Untrusted search path vulnerability in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2024-38248High
An elevation of privilege vulnerability in Windows Storage.
- CVE-2024-30093High
A vulnerability in Windows Storage allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
- CVE-2021-38637Medium
Information Disclosure vulnerability in Windows Storage. Could allow an attacker to read data from memory.
Original NVD description (English source)
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

