MEDIUM 6.8 NVD
CVE-2026-78451
Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.
Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.
Affected Products
- microsoft/windows_10_1809
- microsoft/windows_10_21h2
- microsoft/windows_10_22h2
- microsoft/windows_11_23h2
- microsoft/windows_11_24h2
- microsoft/windows_11_25h2
- microsoft/windows_11_26h1
- microsoft/windows_server_2019
References
This medium severity vulnerability with a CVSS score of 6.8 was published on 2026-09-08 via NVD. Affected: microsoft/windows_10_1809, microsoft/windows_10_21h2, microsoft/windows_10_22h2 and 5 more.
vulnfeed aggregates 12842 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.