CVE-2026-85928
CriticalCVSS 9.8Summary
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker could remotely execute code in kernel context, potentially leading to full system compromise.
Recommendation
Immediately install Windows updates from Microsoft.
Other vulnerabilities in Windows Volume Manager Extension Driver
See all- CVE-2026-77904High
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69582High
Buffer over-read in the Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69468High
Heap-based buffer overflow in Windows Volume Manager Extension Driver. Allows an authorized attacker to elevate privileges locally.
- CVE-2026-69334High
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
- CVE-2026-69291High
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

