CVE-2026-70252
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
A use after free in the Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could elevate their privileges on the system, potentially resulting in full host compromise.
Recommendation
Install the latest Windows updates containing the fix for the VHD Miniport driver.
Other vulnerabilities in Virtual Hard Disk (VHD) Miniport Driver
See all- CVE-2026-81355High
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.
- CVE-2026-69681High
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69549High
Out-of-bounds read in the Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69541High
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69384High
Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally.
- CVE-2026-59125High
A vulnerability in the Virtual Hard Disk (VHD) Miniport Driver involves a use after free, allowing an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS