CVE-2026-69328
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could replace libraries or executables, leading to execution of malicious code with elevated privileges.
Recommendation
Apply Windows security updates for Storage.
Other vulnerabilities in Windows Storage
See all- CVE-2025-21391HighActively exploited
Windows Storage Elevation of Privilege Vulnerability.
- CVE-2026-78516Medium
A buffer over-read vulnerability in Windows Storage allows an unauthorized attacker to disclose information through a physical attack.
- CVE-2026-62695High
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-61359High
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-58526High
A use-after-free vulnerability in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-47648High
Untrusted search path vulnerability in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2024-38248High
An elevation of privilege vulnerability in Windows Storage.
- CVE-2024-30093High
A vulnerability in Windows Storage allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
- CVE-2021-38637Medium
Information Disclosure vulnerability in Windows Storage. Could allow an attacker to read data from memory.
Original NVD description (English source)
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.