CVE-2026-119849: Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability

Published Nov 10, 2026

Updated

Stack-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.

Other sources

Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability

— Microsoft

Affected Software

1 affected component

Microsoft Virtual Hard Disk (VHD) Miniport Driver

Event History

Nov 10, 2026

CVE Published

via Microsoft·04:00 PM

Data Sourced

via Microsoft·04:00 PM

DescriptionSeverityWeakness

CVE Published

via MITRE·06:22 PM

Data Sourced

via MITRE·06:22 PM

DescriptionSeverity

Data Sourced

via NVD·07:20 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need?

The attacker must already be authorized and have local access with low privileges. No user interaction is required according to the supplied vector.

Is there evidence that this can be exploited over the network?

No. The supplied attack vector is local (AV:L), and the description states that code execution occurs locally; the available data does not establish a network-reachable exploitation path.

What is the potential impact after successful exploitation?

The supplied vector rates confidentiality, integrity, and availability impact as high. Successful exploitation could therefore affect all three security properties.

How difficult is exploitation expected to be?

The attack complexity is rated high (AC:H). The provided data does not specify the environmental conditions or additional technical prerequisites that create this complexity.

CVE-2026-119849: Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability

Other sources

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need?

Is there evidence that this can be exploited over the network?

What is the potential impact after successful exploitation?

How difficult is exploitation expected to be?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need?

Is there evidence that this can be exploited over the network?

What is the potential impact after successful exploitation?

How difficult is exploitation expected to be?