CVE-2026-78451
MediumCVSS 6.8Summary
An untrusted pointer dereference vulnerability in the Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges via a physical attack.
Risk Assessment
A physical attack could lead to privilege escalation, potentially enabling full system compromise.
Recommendation
It is recommended to secure physical access to systems and update SCSI drivers.
Other vulnerabilities in Microsoft Windows SCSI Class System File
See all- CVE-2026-78453Medium
An integer underflow (wrap or wraparound) vulnerability in the Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network.
- CVE-2026-78452Medium
An out-of-bounds read vulnerability in the Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information via a physical attack.
Original NVD description (English source)
Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.