Windows Storage
by Microsoft
CVEs (22)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-69328 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62695 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-61359 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-55231 | Hig | 0.49 | 7.5 | 0.01 | Aug 21, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an unauthorized attacker to execute code over a network. | ||
| CVE-2024-30093 | Hig | 0.48 | 7.3 | 0.01 | Jun 11, 2024 | Windows Storage Elevation of Privilege Vulnerability | ||
| CVE-2026-83911 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69935 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69931 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69856 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69766 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69763 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-102191 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-102189 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-100225 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-100216 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-21508 | Hig | 0.46 | 7.0 | 0.00 | Feb 10, 2026 | Improper authentication in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-47648 | Hig | 0.45 | 7.0 | 0.00 | Jun 9, 2026 | Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96944 | Med | 0.36 | 5.5 | 0.00 | Oct 13, 2026 | Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally. | ||
| CVE-2017-11818 | Med | 0.29 | 4.5 | 0.01 | Oct 13, 2017 | The Microsoft Windows Storage component on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass vulnerability when it fails to validate an integrity-level check, aka… | ||
| CVE-2026-78516 | Med | 0.28 | 4.3 | 0.01 | Sep 8, 2026 | Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally. |
- risk 0.51cvss 7.8epss 0.00
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.49cvss 7.5epss 0.01
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an unauthorized attacker to execute code over a network.
- risk 0.48cvss 7.3epss 0.01
Windows Storage Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Improper authentication in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss 0.00
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.36cvss 5.5epss 0.00
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
- risk 0.29cvss 4.5epss 0.01
The Microsoft Windows Storage component on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass vulnerability when it fails to validate an integrity-level check, aka…
- risk 0.28cvss 4.3epss 0.01
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
Page 1 of 2