CVE-2026-85356
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with valid credentials can exploit this flaw to gain higher privileges on the system, potentially leading to full machine compromise.
Recommendation
Immediately install the latest Microsoft security updates for the Volume Manager Extension Driver.
Other vulnerabilities in Windows Volume Manager Extension Driver
See all- CVE-2026-85928Critical
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
- CVE-2026-83694High
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-77904High
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69582High
Buffer over-read in the Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69468High
Heap-based buffer overflow in Windows Volume Manager Extension Driver. Allows an authorized attacker to elevate privileges locally.
- CVE-2026-69334High
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
- CVE-2026-69291High
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS