# CVE-2026-34350: Microsoft Windows Storport Miniport Driver null pointer dereference

Source: https://junglewise.ai/threats/cve-2026-34350-microsoft-windows-storport-miniport-driver-null-pointer  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-12. Updated: 2026-05-14  
License: CC BY 4.0 with a link back

CVE-2026-34350 · Severity: medium · CVSS 6.5 · Published 2026-05-12

A vulnerability in the Microsoft Windows Storport Miniport Driver, a component responsible for managing storage devices, could allow a remote attacker to crash a system. By sending specially crafted data over the network, an attacker can trigger a system failure, leading to a denial of service. This could disrupt business operations and impact the availability of critical servers or workstations.

Technologies: [Microsoft Windows Storport Miniport Driver](https://junglewise.ai/threats/technologies/windows-storport-miniport-driver). Vendors: [Microsoft](https://junglewise.ai/threats/vendors/microsoft).

## Quick answers

**Is CVE-2026-34350 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-34350 being exploited in the wild.

**How severe is CVE-2026-34350?** Medium severity, with a CVSS score of 6.5, published 12 May 2026.

**Which products and versions are affected?** Microsoft Windows Storport Miniport Driver.

**Is there a fix for CVE-2026-34350?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-34350 attacked?** It is attacked over the network, in an operating system.

**Am I affected by CVE-2026-34350?** Check whether you run Microsoft Windows Storport Miniport Driver. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A NULL pointer dereference (CWE-476) exists within the Windows Storport Miniport Driver. The vulnerability is reachable over the network and does not require administrative privileges, though it does require some level of user interaction according to the CVSS vector (UI:R). An attacker who successfully exploits this vulnerability can cause the affected system to crash (BSOD), resulting in a denial-of-service condition. Microsoft has released information regarding this vulnerability via CVE-2026-34350, and users are advised to apply the relevant security updates from the Microsoft Security Response Center.

## Affected products

- Microsoft Windows Storport Miniport Driver

## Timeline

- 2026-05-12: disclosed
- 2026-05-12: advisory

## References

- [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34350](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34350)

## Related threats

- [Windows Storport Miniport Driver numeric truncation information disclosure](https://junglewise.ai/threats/cve-2026-119875-numeric-truncation-error-in-windows-storport-miniport-driver)
- [Windows Storport Miniport Driver heap overflow](https://junglewise.ai/threats/cve-2026-119830-heap-based-buffer-overflow-in-windows-storport-miniport-driver)
- [Windows Storport Miniport Driver heap-based buffer overflow](https://junglewise.ai/threats/cve-2026-119823-heap-based-buffer-overflow-in-windows-storport-miniport-driver)
- [Windows Storport Miniport Driver use after free](https://junglewise.ai/threats/cve-2026-69765-use-after-free-in-windows-storport-miniport-driver-allows-an)