CVE-2026-69895

Awaiting Analysis Awaiting Analysis - Queue

Out-of-Bounds Read in Windows Spaceport.sys

Publication date: 2026-09-08

Last updated on: 2026-09-08

Assigner: Microsoft Corporation

Description

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-08

Generated

2026-09-09

AI Q&A

2026-09-09

EPSS Evaluated

N/A

NVD

CVE-2026-69895

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This is an out-of-bounds read vulnerability in Windows Spaceport.sys. An authorized attacker could exploit it to read memory outside intended boundaries, potentially accessing sensitive data on the local system.

Impact Analysis

An attacker with local access could exploit this to disclose confidential information from memory, such as passwords or encryption keys. However, the attack requires prior authorization and is limited to local systems.

Compliance Impact

This vulnerability could lead to unauthorized data disclosure, which may violate GDPR (data protection) or HIPAA (health data privacy) if exploited. Organizations must assess exposure and apply mitigations to maintain compliance.

Mitigation Strategies

Apply the latest Windows security updates from Microsoft to patch the Spaceport.sys vulnerability. Ensure your system is updated to the most recent version to prevent unauthorized local information disclosure.

Hi! I’m here to help you understand CVE-2026-69895. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70