3 reportsPriority Low
Multiple Windows driver vulnerabilities disclosed
New vulnerabilities in Windows drivers could allow attackers to execute code or escalate privileges, requiring organisations to assess their exposure.
First report Latest
What is going on
- A vulnerability in the Windows CD-ROM Driver could allow remote code execution with a 0.9% estimated attack chance.
- A heap-based buffer overflow in the Windows USB Mass Storage Class Driver also poses a remote code execution risk.
- An integer overflow in the Volume Manager Driver could enable local privilege escalation if exploited.
- All three vulnerabilities were disclosed on 2026-11-10 and require organisations to check if affected software is in use.
- What to watch: Confirming whether any of the affected drivers are present in organisational systems could change the risk assessment.
Reports in this story
Newest first. Each one is a separate event with its own sources and evidence.
- Priority LowType VulnerabilityLead report
Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally
- Priority LowType Vulnerability
Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network
- Priority LowType Vulnerability
Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network