← Back to search

CVE-2026-69765

8.8 HIGH

Published 2026-10-13 · Updated 2026-10-13

AI risk analysis

Summary
A use-after-free vulnerability in Windows Storport Miniport Driver allows remote attackers to execute arbitrary code with high privileges. This flaw occurs when the driver improperly handles memory after it has been freed, creating a potential remote code execution vector.
Exploitability
Exploitation requires a network-based attack with minimal preconditions, as the vulnerability is reachable over the network without authentication and can be triggered by sending specially crafted packets to the affected system.
Blast radius
The impact could be widespread across Windows systems running affected storage drivers, potentially allowing attackers to gain full system compromise with elevated privileges.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Apply the latest Windows updates including KB5042819 or later patch for Storport Miniport Driver.
rcestoragewindowsnetwork

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-416

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.