{"id":"CVE-2026-97805","published":"2026-10-13T19:22:18.440","lastModified":"2026-10-16T17:18:04.540","description":"Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-20","CWE-125"],"vendors":["microsoft"],"products":["windows 10 1607","windows 10 1809","windows 10 21h2","windows 10 22h2","windows 11 23h2","windows 11 24h2","windows 11 25h2","windows 11 26h1","windows 11 26h2","windows server 2012","windows server 2016","windows server 2019"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97805","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This CVE describes an out-of-bounds read vulnerability in Windows Partition Management Driver that allows remote code execution. The flaw occurs when processing partition data structures, potentially enabling attackers to read beyond allocated memory boundaries and execute arbitrary code on vulnerable systems.","exploitability":"Exploitation appears moderately difficult as it requires a network-based attack against the partition management driver with specific input conditions, but could be automated given the right access vector.","blast_radius":"The impact could be significant across Windows systems that use partition management features, potentially affecting servers and workstations that process external storage or network drives.","remediation":"Apply the latest Windows updates including KB5042345 or later patches for the partition management driver component.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","windows","privilege-escalation"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:52:12.602Z"}}