EUVD-2026-73537
GHSA-gh8j-97vr-2gqq
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Local kernel driver access requires an authenticated low-privileged user (PR:L, AV:L); full kernel code execution yields complete C/I/A impact on the system.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
6DescriptionCVE.org
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
AnalysisAI
Local privilege escalation in Windows Spaceport.sys, the kernel-mode Storage Spaces driver, allows an authenticated low-privileged local attacker to execute arbitrary code in kernel context, achieving full SYSTEM-level control with no user interaction. The flaw is an out-of-bounds read (CWE-125) in the kernel driver, exploitable across virtually every supported and extended-support Windows release from Server 2012 through Windows 11 26H1 and Server 2025. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an authenticated low-privileged local account on the targeted Windows system - CVSS PR:L confirms a standard user is sufficient, and PR:N (unauthenticated) remote exploitation is not possible per the AV:L vector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.8 score with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H accurately reflects a high-impact local privilege escalation: a low-privileged user account is the only prerequisite, attack complexity is low, and the outcome is full kernel-level code execution. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft-released security update targeting the specific build thresholds listed per OS version - for example, updating Windows Server 2025 to build 10.0.26100.33438 or higher, Windows 11 24H2/25H2 to 10.0.26100.9445/10.0.26200.9445, and Windows Server 2022 to 10.0.20348.5622. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all Windows systems running Storage Spaces functionality (Windows Server 2012 through Server 2025 and Windows 11), and document their current build versions and Storage Spaces role/feature status. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today