CVE-2026-78516
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
A buffer over-read vulnerability in Windows Storage allows an unauthorized attacker to disclose information through a physical attack.
Risk Assessment
An attacker with physical access to the device could read data from memory, potentially leaking sensitive information.
Recommendation
Install Windows security updates and ensure physical security of devices.
Other vulnerabilities in Windows Storage
See all- CVE-2025-21391HighActively exploited
Windows Storage Elevation of Privilege Vulnerability.
- CVE-2026-69328High
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-62695High
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-61359High
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-58526High
A use-after-free vulnerability in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-47648High
Untrusted search path vulnerability in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2024-38248High
An elevation of privilege vulnerability in Windows Storage.
- CVE-2024-30093High
A vulnerability in Windows Storage allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
- CVE-2021-38637Medium
Information Disclosure vulnerability in Windows Storage. Could allow an attacker to read data from memory.
Original NVD description (English source)
Buffer over-read in Windows Storage allows an unauthorized attacker to disclose information with a physical attack.