CVE-2026-72942
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk59th percentile - higher than 59% of all known CVEs
Summary
Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network.
Risk Assessment
A remote attacker could access system data, potentially leading to information disclosure.
Recommendation
Apply Windows security updates to mitigate this vulnerability.
Other vulnerabilities in Windows Spaceport.sys
See all- CVE-2026-72952High
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
- CVE-2026-71350Medium
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
- CVE-2026-71349Medium
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code via a physical attack.
- CVE-2026-71348Medium
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code via a physical attack.
- CVE-2026-71345High
Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally.
- CVE-2026-70569High
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
- CVE-2026-69895Medium
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
- CVE-2026-69770Medium
A use of uninitialized resource vulnerability in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
- CVE-2026-69741Medium
An out-of-bounds read vulnerability in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
- CVE-2026-69691High
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS