Executive brief
The Virtual Hard Disk (VHD) Miniport Driver is a Windows component that manages virtual disk storage. A heap-based buffer overflow in this driver allows a local attacker with existing system access to execute arbitrary code and escalate privileges, potentially gaining complete control of the affected system.
Technical details
A heap-based buffer overflow vulnerability exists in the Virtual Hard Disk (VHD) Miniport Driver, a Windows kernel-mode driver responsible for managing virtual disk operations. The vulnerability is triggered by a local attacker who already has valid system access, making this a privilege escalation attack vector. The overflow allows an attacker to corrupt heap memory and achieve arbitrary code execution in kernel context, leading to privilege escalation. The attack requires local access but no special system privileges beyond basic user rights. Microsoft has released security updates to address this vulnerability.
Affected products
- Microsoft Windows VHD Miniport Driver
Timeline
- 2026-09-08: disclosed