CVE-2026-95889: Windows Storage Elevation of Privilege Vulnerability

Published Nov 10, 2026

Updated

Untrusted pointer dereference in Windows Storage allows an authorized attacker to elevate privileges with a physical attack.

Other sources

Windows Storage Elevation of Privilege Vulnerability

— Microsoft

Affected Software

1 affected component

Microsoft Windows Storage

Event History

Nov 10, 2026

CVE Published

via Microsoft·04:00 PM

Data Sourced

via Microsoft·04:00 PM

DescriptionSeverityWeakness

CVE Published

via MITRE·06:17 PM

Data Sourced

via MITRE·06:17 PM

DescriptionSeverity

Data Sourced

via NVD·07:21 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Exploitation requires an authorized attacker and physical access. No user interaction is required.

What could a successful exploit allow an attacker to do?

A successful exploit could elevate privileges. The vulnerability is rated as having high potential impact on confidentiality, integrity, and availability, with unchanged scope.

CVE-2026-95889: Windows Storage Elevation of Privilege Vulnerability

Other sources

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What could a successful exploit allow an attacker to do?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What could a successful exploit allow an attacker to do?