CVE-2026-58601
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
In Windows Virtual Hard Disk (VHD) Miniport Driver, a heap-based buffer overflow vulnerability allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized user can gain higher privileges, potentially leading to system compromise.
Recommendation
It is recommended to apply the security patch from Microsoft or restrict access to the VHD driver.
Other vulnerabilities in Windows VHD Miniport Driver
See all- CVE-2026-109453High
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-102220High
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69611High
Use after free in the Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-56172High
A use-after-free vulnerability in the Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS