CVE-2026-97805

Summary

This CVE describes an out-of-bounds read vulnerability in Windows Partition Management Driver that allows remote code execution. The flaw occurs when processing partition data structures, potentially enabling attackers to read beyond allocated memory boundaries and execute arbitrary code on vulnerable systems.

Exploitability

Exploitation appears moderately difficult as it requires a network-based attack against the partition management driver with specific input conditions, but could be automated given the right access vector.

Blast radius

The impact could be significant across Windows systems that use partition management features, potentially affecting servers and workstations that process external storage or network drives.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Apply the latest Windows updates including KB5042345 or later patches for the partition management driver component.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.