CVE-2026-78508
MediumCVSS 4.6Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
An out-of-bounds read vulnerability in the Windows CD-ROM Driver allows an unauthorized attacker to disclose information via a physical attack.
Risk Assessment
A physical attack could lead to disclosure of data stored on CD-ROM media, posing a threat to information confidentiality.
Recommendation
It is recommended to secure physical access to systems and update the CD-ROM driver to the latest version.
Other vulnerabilities in Windows CD-ROM Driver
See all- CVE-2026-85377High
Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-83888Medium
A buffer over-read in the Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-70275High
Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.
- CVE-2026-70041Medium
Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
- CVE-2026-78454Medium
An out-of-bounds read vulnerability in the Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
- CVE-2026-69561High
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69283High
Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS