CVE-2026-83888
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk59th percentile - higher than 59% of all known CVEs
Summary
A buffer over-read in the Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
A network attack can lead to privilege escalation, enabling system takeover and access to sensitive data.
Recommendation
Apply CD-ROM driver updates and restrict network access to the system using appropriate firewalls and network segmentation.
Other vulnerabilities in Windows CD-ROM Driver
See all- CVE-2026-85377High
Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-70275High
Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.
- CVE-2026-70041Medium
Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
- CVE-2026-78508Medium
An out-of-bounds read vulnerability in the Windows CD-ROM Driver allows an unauthorized attacker to disclose information via a physical attack.
- CVE-2026-78454Medium
An out-of-bounds read vulnerability in the Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
- CVE-2026-69561High
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69283High
Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

