Vulnerabilities
Windows CD-ROM Driver Elevation of Privilege Vulnerability (CVE-2026-85377)
Microsoft has acknowledged a Windows CD-ROM driver flaw (CVE-2026-85377) that can be exploited for local privilege escalation. The issue affects systems running Windows 10 and later with the default CD-ROM driver enabled. Defenders should verify patch status, disable the CD-ROM driver if not required, and monitor for an official fix.
What happened
Microsoft has identified a flaw in the Windows CD-ROM driver that permits local privilege escalation. The vulnerability is assigned CVE-2026-85377.
Impact
All Windows 10 and Windows 11 installations that use the built‑in CD-ROM driver are potentially vulnerable. An attacker with local access could gain elevated privileges on the affected system.
What to do
- Confirm whether the CD-ROM driver is installed and enabled on your systems.
- If the CD-ROM drive is not required, disable the driver via Device Manager or group policy.
- Check for an official patch or update from Microsoft; apply it as soon as it becomes available.
- Monitor Microsoft Security Advisories for further details or mitigation guidance.
Additional info
Microsoft has issued an informational update acknowledging the vulnerability; no immediate remediation is available beyond disabling the driver.
Related vulnerabilities
Windows exFAT Elevation of Privilege Vulnerability (CVE‑2026‑69619) – Immediate Patch Required
Microsoft released a security update for CVE‑2026‑69619, an elevation‑of‑privilege flaw in the Windows exFAT file‑system driver. The vulnerability allows local attackers to gain SYSTEM rights by manipulating exFAT volumes. All Windows 10/11 and Server 2022 installations that use exFAT are affected; apply the update via Windows Update or WSUS immediately.
Read briefing
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVE-2026-33835)
Microsoft has disclosed a critical local privilege escalation flaw in the Windows Cloud Files Mini Filter Driver. The vulnerability allows a local user to gain SYSTEM rights by exploiting improper validation in the driver. A patch is available in the 2026 cumulative update for all supported Windows releases.
Read briefing
CVE-2026-50414: Windows Media Elevation of Privilege Vulnerability
Microsoft identified CVE-2026-50414, an elevation of privilege flaw in Windows Media Player that allows local users to gain SYSTEM rights. The issue is fixed in the latest cumulative update for Windows 10/11 and Windows Server 2022. Defenders should verify patch status and consider disabling the media component if not needed.
Read briefing
CVE-2026-65787: Desktop Window Manager Elevation of Privilege Vulnerability
Microsoft has acknowledged CVE-2026-65787, an elevation of privilege flaw in the Desktop Window Manager (DWM) component of Windows. The issue could allow local attackers to gain higher privileges. Defenders should ensure the latest Windows updates are installed and monitor for vendor advisories.
Read briefing