{"id":"CVE-2026-70275","published":"2026-10-13T19:19:46.693","lastModified":"2026-10-16T16:20:50.643","description":"Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-822"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70275","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A untrusted pointer dereference vulnerability in the Windows CD-ROM driver allows remote attackers to execute arbitrary code on affected systems. This flaw occurs when processing untrusted data from CD-ROM devices, potentially enabling attackers to gain full system control without authentication.","exploitability":"Exploitation requires a network-based attack vector with minimal preconditions, as the vulnerability is remotely exploitable and does not require user interaction or authentication.","blast_radius":"The vulnerability could affect a wide range of Windows systems that have CD-ROM drivers installed, potentially allowing attackers to compromise entire networks through remote code execution.","remediation":"Apply the latest Windows updates from Microsoft Security Bulletin MS26-075 which includes the fix for this vulnerability in the Windows CD-ROM driver.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","windows","driver","network"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:56:46.322Z"}}