CVE-2026-78516
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
Risk Assessment
An authorized attacker can access sensitive data, potentially leading to confidentiality breach.
Recommendation
Apply security updates provided by the vendor and restrict access to sensitive files.
Other vulnerabilities in Windows Storage
See all- CVE-2025-21391HighActively exploited
Windows Storage Elevation of Privilege Vulnerability.
- CVE-2026-96944Medium
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
- CVE-2026-83911High
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-69935High
Use after free vulnerability in Windows Storage. An authorized attacker can exploit this flaw to elevate privileges locally.
- CVE-2026-69931High
Race condition due to concurrent execution using a shared resource with improper synchronization in Windows Storage. An authorized attacker can exploit this flaw to elevate privileges locally.
- CVE-2026-69856High
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-69766High
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-69763High
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-102191High
A heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-102189High
A heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS