CVE-2026-59125
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
A vulnerability in the Virtual Hard Disk (VHD) Miniport Driver involves a use after free, allowing an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit the flaw to gain elevated privileges, potentially leading to full system control.
Recommendation
Install the latest driver and Windows updates. Restrict access to VHD features to trusted users only.
Other vulnerabilities in Virtual Hard Disk (VHD) Miniport Driver
See all- CVE-2026-70252High
A use after free in the Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-81355High
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.
- CVE-2026-69681High
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69549High
Out-of-bounds read in the Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69541High
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69384High
Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally.
Original NVD description (English source)
Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS