CVE-2026-88226
MediumCVSS 4.6Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
An out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
Risk Assessment
An attacker with physical access to the device can read data beyond the driver's allowed memory range, leading to information disclosure.
Recommendation
Update Windows to the version containing the Storage Port driver fix. Restrict physical access to devices.
Other vulnerabilities in Windows Storage Port Driver
See all- CVE-2026-96863Medium
Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack. The flaw requires physical access to the device.
- CVE-2026-102188Medium
Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
- CVE-2026-72946High
Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69381Medium
The vulnerability in the Windows Storage Port Driver is an out-of-bounds read. It allows an unauthorized attacker to disclose information via a physical attack.
- CVE-2026-65814High
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS