EUVD-2026-73518
GHSA-w5wp-75mj-9qqm
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Standard user triggers OOB read in kernel driver via IOCTL; AC:L because cdrom.sys is loaded by default with no special configuration required.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
5DescriptionCVE.org
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
AnalysisAI
Local privilege escalation in the Windows CD-ROM kernel driver (cdrom.sys) enables a standard authenticated user to achieve SYSTEM-level access across virtually all supported Windows versions from Server 2012 through Windows 11 25H2 and Windows Server 2025. The root cause is CWE-125 out-of-bounds read, which in a kernel driver context can expose memory contents and be chained into privilege escalation via kernel structure corruption. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a locally authenticated account with standard user (non-administrator) privileges on the target Windows system - PR:L in the CVSS vector confirms this. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | CVSS 7.8 (High) with AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H accurately reflects a low-barrier local privilege escalation: standard user credentials plus a local session (interactive, RDP, or terminal services) are the only prerequisites, and AC:L signals no race condition or environmental dependency. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft security update for the relevant Windows version via Windows Update, WSUS, or Microsoft Update Catalog; exact fixed builds are documented in the MSRC advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69561 (e.g., Windows 11 24H2 → 10.0.26100.9445, Windows Server 2022 → 10.0.20348.5622, Windows Server 2019 → 10.0.17763.9245). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, audit all Windows Server 2012, 2012 R2, 2016, 2019, 2022, 2025 and Windows 11 systems to identify exposure scope and prioritize critical infrastructure (domain controllers, file servers, email servers). …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-125 – Out-of-bounds Read
View allShare
External POC / Exploit Code
Leaving vuln.today