CVE-2026-69568: Storage Spaces Controller Information Disclosure Vulnerability
Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally.
Other sources
Storage Spaces Controller Information Disclosure Vulnerability
— Microsoft
Affected Software
Remediation
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Systems running the listed Microsoft Windows 10 or Windows 11 releases, or the listed Windows Server 2012, 2012 R2, 2016, 2019, 2022, or 2025 releases, are affected according to the provided data.
What access does an attacker need to exploit it?
An attacker must already be authorized on the target system and must be able to act locally. The supplied vector indicates low attack complexity and no user interaction requirement.
What is the expected impact of successful exploitation?
Successful exploitation can disclose information through an out-of-bounds read in the Windows Storage Spaces Controller. The provided severity vector indicates high confidentiality impact, with no indicated integrity or availability impact.