CVE-2026-96863
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack. The flaw requires physical access to the device.
Risk Assessment
An attacker with physical access could exploit the flaw to elevate privileges and take control of the system, posing a serious threat to device security.
Recommendation
Promptly install Microsoft patches for the Windows Storage Port Driver and physically secure devices against unauthorized access.
Other vulnerabilities in Windows Storage Port Driver
See all- CVE-2026-88226Medium
An out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
- CVE-2026-102188Medium
Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
- CVE-2026-72946High
Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69381Medium
The vulnerability in the Windows Storage Port Driver is an out-of-bounds read. It allows an unauthorized attacker to disclose information via a physical attack.
- CVE-2026-65814High
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS