CVE-2026-69381
MediumCVSS 4.6Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
The vulnerability in the Windows Storage Port Driver is an out-of-bounds read. It allows an unauthorized attacker to disclose information via a physical attack.
Risk Assessment
The risk is the possibility of physical access to data, which may lead to leakage of confidential information in case of theft or unauthorized hardware access.
Recommendation
Install security updates for Windows. Ensure physical security of hardware and restrict access to storage media.
Other vulnerabilities in Windows Storage Port Driver
See all- CVE-2026-96863Medium
Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack. The flaw requires physical access to the device.
- CVE-2026-88226Medium
An out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
- CVE-2026-102188Medium
Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
- CVE-2026-72946High
Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-65814High
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS