CVE-2026-81355 – Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability
CVSS 7.5
IMPORTANT
Critical - Same Day Deployment
“A heap buffer overflow in the VHD Miniport Driver could turn authorized local access into code execution with serious consequences for confidentiality, integrity, and availability.”
CVE-2026-81355 is a Critical remote code execution vulnerability caused by a heap-based buffer overflow in the Microsoft Virtual Hard Disk (VHD) Miniport Driver. An authorized attacker can exploit the vulnerability locally to execute code. Exploitation requires high privileges, high attack complexity, and no user interaction. The vulnerability is not publicly disclosed or known to be exploited.
Key Details
- Attack Vector
- Local
- Attack Complexity
- High
- Privileges Required
- High
- User Interaction
- None
- CWE Classification
- CWE-122
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.