CVE-2026-69765
8.8 HIGHPublished 2026-10-13 · Updated 2026-10-13
AI risk analysis
- Summary
- A use-after-free vulnerability in Windows Storport Miniport Driver allows remote attackers to execute arbitrary code with high privileges. This flaw occurs when the driver improperly handles memory after it has been freed, creating a potential remote code execution vector.
- Exploitability
- Exploitation requires a network-based attack with minimal preconditions, as the vulnerability is reachable over the network without authentication and can be triggered by sending specially crafted packets to the affected system.
- Blast radius
- The impact could be widespread across Windows systems running affected storage drivers, potentially allowing attackers to gain full system compromise with elevated privileges.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Apply the latest Windows updates including KB5042819 or later patch for Storport Miniport Driver.
rcestoragewindowsnetwork
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-416
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2026-100202
- CRITICALCVE-2026-83862
- CRITICALCVE-2026-88102
- HIGHCVE-2026-100220
- HIGHCVE-2026-102225
- CRITICALCVE-2026-67269
- CRITICALCVE-2026-69886
- HIGHCVE-2026-70069
Related by shared AI tags and CWE weakness class. Browse the full archive.