CVEFinder.io

CVE-2026-56172

⚠️ high
🔍 Scan for this CVE
Summary

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.

CVSS Score
7.8
High
EPSS Score
0.3
Exploit Probability
Published Date
2026-09-08
First Seen: 2026-09-09
📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 68.5% of all 360,673 vulnerabilities in our database.

#113,591
Above average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Sep 8, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Total
Complete system compromise possible
SSVC data provided by CISA
Last Modified 2026-09-17
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE IDs (Weakness Types)
CWE-416

📦 Affected Products 10

Vendor Product Status Affected Versions
microsoft windows_server_2019 Affected
< 10.0.17763.9245
microsoft windows_server_2022 Affected
< 10.0.20348.5622
microsoft windows_10_1809 Affected
< 10.0.17763.9245
microsoft windows_10_21h2 Affected
< 10.0.19044.7725
microsoft windows_10_22h2 Affected
< 10.0.19045.7725
microsoft windows_11_23h2 Affected
< 10.0.22631.7582
microsoft windows_11_24h2 Affected
< 10.0.26100.9445
microsoft windows_server_2025 Affected
< 10.0.26100.33438
microsoft windows_11_25h2 Affected
< 10.0.26200.9445
microsoft windows_11_26h1 Affected
< 10.0.28000.2954

🔗 References 1

https://msrc.microsoft.com/update-guide/vulnerabilit...
Patch Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-50349 ⚠️ high 7.0 0.2 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Functio... 2026-09-08
CVE-2026-56177 ⚠️ high 7.8 0.3 Use after free in Windows Server allows an authorized attacker to elevate privileges locally. 2026-09-08
CVE-2026-62694 ⚠️ high 7.0 0.3 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. 2026-09-08
CVE-2026-62706 ⚠️ high 8.8 0.6 Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. 2026-09-08
CVE-2026-62759 ⚠️ high 7.5 0.3 Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjace... 2026-09-08
CVE-2026-62801 🔶 medium 6.5 0.5 Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthori... 2026-09-08
These CVEs affect the same products