Buffer Over-Read Vulnerability in Windows Storage by Microsoft
CVE-2026-78516

4.3MEDIUM

Key Information:

Vendor

Microsoft
Status
Windows 10 Version 1607
Windows 10 Version 1809
Windows 10 Version 21h2
Windows 10 Version 22h2
Vendor
CVE Published:
8 September 2026

What is CVE-2026-78516?

A buffer over-read vulnerability in Microsoft Windows Storage could allow an unauthorized attacker to disclose sensitive information through a physical attack. This security issue underscores the importance of securing physical access to systems, as an attacker with direct access could exploit this weakness to gather confidential data. Users and administrators are advised to review the necessary patches and security measures to mitigate this risk.

Affected Version(s)

Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.9512

Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.9245

Windows 10 Version 21H2 32-bit Systems 10.0.19044.0 < 10.0.19044.7725

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.