CVE-2026-70275

Summary

A untrusted pointer dereference vulnerability in the Windows CD-ROM driver allows remote attackers to execute arbitrary code on affected systems. This flaw occurs when processing untrusted data from CD-ROM devices, potentially enabling attackers to gain full system control without authentication.

Exploitability

Exploitation requires a network-based attack vector with minimal preconditions, as the vulnerability is remotely exploitable and does not require user interaction or authentication.

Blast radius

The vulnerability could affect a wide range of Windows systems that have CD-ROM drivers installed, potentially allowing attackers to compromise entire networks through remote code execution.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Apply the latest Windows updates from Microsoft Security Bulletin MS26-075 which includes the fix for this vulnerability in the Windows CD-ROM driver.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.