CVE-2026-78452
MediumCVSS 4.6Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
An out-of-bounds read vulnerability in the Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information via a physical attack.
Risk Assessment
A physical attack could lead to data disclosure, posing a threat to information confidentiality.
Recommendation
It is recommended to secure physical access to systems and update SCSI drivers.
Other vulnerabilities in Microsoft Windows SCSI Class System File
See all- CVE-2026-78453Medium
An integer underflow (wrap or wraparound) vulnerability in the Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network.
- CVE-2026-78451Medium
An untrusted pointer dereference vulnerability in the Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges via a physical attack.
Original NVD description (English source)
Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS