EUVD-2026-73526
GHSA-68cm-7xg3-p3m4
Severity by source
AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Network-reachable kernel driver with low-privilege attacker and required user interaction; privilege escalation to SYSTEM justifies full C:H/I:H/A:H with unchanged scope.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
3DescriptionCVE.org
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.
AnalysisAI
Heap-based buffer overflow in Spaceport.sys - the Windows kernel-mode driver for Storage Spaces - allows a low-privileged authenticated attacker to escalate to SYSTEM-level privileges over a network, with full confidentiality, integrity, and availability impact. Every supported Windows desktop and server release from Windows 10 1607 through Windows 11 26H1 and Windows Server 2016 through 2025 is affected before the patched builds. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid low-privilege authenticated account (PR:L) with network access to a target Windows system running one of the affected builds. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 8.0 score and accompanying C:H/I:H/A:H triad reflect a genuinely severe primitive: a network-reachable heap overflow in a kernel driver that, if successfully triggered, yields SYSTEM-level control. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply Microsoft's released patches via Windows Update, WSUS, or Microsoft Update Catalog, targeting the specific build thresholds listed above (e.g., Windows Server 2022 to 10.0.20348.5622, Windows 10 22H2 to 10.0.19045.7725, Windows Server 2025 to 10.0.26100.33438). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Windows systems running Windows 10 (build 1607+), Windows 11 (build 26H1 and earlier), and Windows Server 2016-2025 to scope affected assets, and obtain the Microsoft security update from MSRC. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-122 – Heap-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today