{"id":"CVE-2026-85928","published":"2026-10-13T19:21:18.917","lastModified":"2026-10-16T16:22:19.120","description":"Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85928","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in the Windows Volume Manager Extension Driver allows remote attackers to execute arbitrary code with high privileges. This vulnerability affects systems running Windows and can be exploited over a network without authentication.","exploitability":"Exploitation is relatively straightforward as it requires no authentication or user interaction, though it may need a specific network configuration to trigger the vulnerable driver component.","blast_radius":"The impact could be severe across enterprise environments as the vulnerability allows for remote code execution with system-level privileges, potentially leading to full system compromise and lateral movement.","remediation":"Apply the Windows Update KB5059287 or later patch immediately to address this heap buffer overflow vulnerability in the Volume Manager Extension Driver.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","windows","privilege-escalation","network"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:50:37.624Z"}}