CVE-2026-71349
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code via a physical attack.
Risk Assessment
A physical attack could lead to full system compromise, posing a serious threat to data confidentiality and integrity.
Recommendation
Apply the latest Windows security updates that patch this vulnerability.
Other vulnerabilities in Windows Spaceport.sys
See all- CVE-2026-72952High
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
- CVE-2026-72942Medium
Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network.
- CVE-2026-71350Medium
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
- CVE-2026-71348Medium
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code via a physical attack.
- CVE-2026-71345High
Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally.
- CVE-2026-70569High
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
- CVE-2026-69895Medium
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
- CVE-2026-69770Medium
A use of uninitialized resource vulnerability in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
- CVE-2026-69741Medium
An out-of-bounds read vulnerability in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
- CVE-2026-69691High
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

