CVE-2026-77904
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized attacker could elevate privileges, potentially gaining full control of the system and compromising data integrity.
Recommendation
Install the latest Windows security updates.
Other vulnerabilities in Windows Volume Manager Extension Driver
See all- CVE-2026-85928Critical
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
- CVE-2026-85356High
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-83694High
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69582High
Buffer over-read in the Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69468High
Heap-based buffer overflow in Windows Volume Manager Extension Driver. Allows an authorized attacker to elevate privileges locally.
- CVE-2026-69334High
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
- CVE-2026-69291High
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS