CVE-2026-72946
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized user can gain elevated privileges, potentially leading to full system control and attack escalation.
Recommendation
Install Windows security updates and monitor local activity for privilege escalation attempts.
Other vulnerabilities in Windows Storage Port Driver
See all- CVE-2026-96863Medium
Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack. The flaw requires physical access to the device.
- CVE-2026-88226Medium
An out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
- CVE-2026-102188Medium
Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
- CVE-2026-69381Medium
The vulnerability in the Windows Storage Port Driver is an out-of-bounds read. It allows an unauthorized attacker to disclose information via a physical attack.
- CVE-2026-65814High
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS