CVE-2026-71349: Windows Spaceport.sys Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
Other sources
Windows Spaceport.sys Remote Code Execution Vulnerability
— Microsoft
Affected Software
Remediation
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running the listed Microsoft Windows 10, Windows 11, and Windows Server versions are in scope. Exploitation requires physical access to the target, so remotely accessible systems are not directly exploitable through this vulnerability based on the available data.
Does an attacker need credentials or user interaction?
No privileges and no user interaction are required according to the supplied vector. The attacker does need physical access to the affected system.
What is the potential impact if exploitation succeeds?
Successful exploitation can allow code execution and is rated as having high impact on confidentiality, integrity, and availability. The vulnerability is a heap-based buffer overflow in Spaceport.sys.