{"id":"CVE-2026-69765","published":"2026-10-13T19:18:58.897","lastModified":"2026-10-13T22:17:44.373","description":"Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-416"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69765","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A use-after-free vulnerability in Windows Storport Miniport Driver allows remote attackers to execute arbitrary code with high privileges. This flaw occurs when the driver improperly handles memory after it has been freed, creating a potential remote code execution vector.","exploitability":"Exploitation requires a network-based attack with minimal preconditions, as the vulnerability is reachable over the network without authentication and can be triggered by sending specially crafted packets to the affected system.","blast_radius":"The impact could be widespread across Windows systems running affected storage drivers, potentially allowing attackers to gain full system compromise with elevated privileges.","remediation":"Apply the latest Windows updates including KB5042819 or later patch for Storport Miniport Driver.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","storage","windows","network"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:54:18.973Z"}}