EUVD-2026-73667
GHSA-3pw7-j93f-xj7p
Severity by source
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Local kernel driver exploitation requires only low user privileges but high complexity for reliable memory corruption; successful kernel-level execution justifies full C:H/I:H/A:H.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
6DescriptionCVE.org
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
AnalysisAI
Local privilege escalation in Windows Spaceport.sys, the Storage Spaces kernel driver, allows a low-privileged local user to execute arbitrary code at the kernel level across a broad range of Windows 10, 11, and Server editions. The CWE-125 out-of-bounds read in this kernel driver can be leveraged - under high-complexity conditions such as heap grooming - to corrupt adjacent kernel memory structures and redirect execution, yielding SYSTEM-level privileges. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an authenticated local user account with the ability to issue I/O control operations against Spaceport.sys - the Windows Storage Spaces kernel driver. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H reflects a locally exploitable kernel driver flaw requiring only a low-privileged account but demanding high attack complexity, consistent with needing precise heap layout, race conditions, or specific trigger sequencing to convert an OOB read into reliable code execution. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor-released patches via Windows Update or the Microsoft Update Catalog. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, use your asset management systems to identify all Windows 10, 11, and Server systems deployed in your environment; prioritize those where users maintain local login rights. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today