CVE Catalog

CVE-2026-59125

HighCVSS 7.0
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.25%

16th percentile - higher than 16% of all known CVEs

Summary

A vulnerability in the Virtual Hard Disk (VHD) Miniport Driver involves a use after free, allowing an authorized attacker to elevate privileges locally.

Risk Assessment

An attacker could exploit the flaw to gain elevated privileges, potentially leading to full system control.

Recommendation

Install the latest driver and Windows updates. Restrict access to VHD features to trusted users only.

Original NVD description (English source)

Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS