CVE-2026-97805

9.8Critical

Published 13 Oct 2026 · NVD status: Analyzed · AI triage by gemini-3.8-flash

9.8Critical

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None
Impact: Full C/I/A compromise
Weakness: CWE-20, CWE-125

Impact

Unauthenticated attackers can execute arbitrary code over the network. They require only network access to the affected Windows system without needing credentials or user interaction.

Root cause

Improper input validation leads to an out-of-bounds read in the Windows Partition Management Driver.

Affected systems

Versions not listed — check the vendor advisory.

CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Fix & remediation

Install the security update from Microsoft's MSRC advisory; no specific interim mitigation or workaround is provided in the advisory.

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97805PatchVendor Advisory

Source: nvd.nist.gov/vuln/detail/CVE-2026-97805