EUVD-2026-22505Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
6DescriptionCVE.org
Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
AnalysisAI
Local privilege escalation in Windows Storage Spaces Controller (Windows 11 22H2-26H1, Server 2022-2025) enables low-privileged authenticated users to gain SYSTEM-level access via out-of-bounds read exploitation. CVSS 7.8 (High). No public exploit identified at time of analysis, but ENISA EUVD tracking indicates European regulatory attention. Vendor-released patches available for all affected versions.
Technical ContextAI
Windows Storage Spaces Controller manages software-defined storage pools and virtual disks in Windows environments. This vulnerability stems from CWE-125 (Out-of-bounds Read), where improper bounds checking allows reading memory outside allocated buffers. The flaw exists in how the controller processes certain storage management operations, enabling authenticated local users to access sensitive kernel memory. Affected products span Windows 11 versions 22H3 through 26H1 (builds 10.0.22631.x through 10.0.28000.x) and Windows Server 2022 23H2 Edition and Server 2025 (builds 10.0.25398.x and 10.0.26100.x), including Server Core installations. The out-of-bounds read primitive can be leveraged to leak kernel addresses or sensitive data structures, which when combined with additional techniques, enables privilege escalation from low-privileged user context to SYSTEM integrity level.
RemediationAI
Apply Microsoft security updates immediately via Windows Update or WSUS to patch the Storage Spaces Controller vulnerability. Fixed versions: Windows 11 22H3/23H2 build 10.0.22631.6936 or later, Windows 11 24H2 build 10.0.26100.32690 or later, Windows 11 25H2 build 10.0.26200.8246 or later, Windows 11 26H1 build 10.0.28000.1836 or later, Windows Server 2022 23H2 build 10.0.25398.2274 or later, Windows Server 2025 build 10.0.26100.32690 or later. No workarounds identified; patching is the only effective mitigation. Verify patch deployment through Microsoft Update Catalog or enterprise patch management tools. Consult official guidance at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32076 for deployment considerations and known issues.
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today