This vulnerability (CVE-2026-34350) is a null pointer dereference in the Windows Storport Miniport Driver component of Microsoft Windows Server 2025 (version 10.0.26100.0). The flaw allows an attacker without privileges to cause a denial of service by remotely triggering the null pointer dereference over the network. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or integrity impact, but high impact on availability. Microsoft has released an official fix for this vulnerability.

Exploitation of this vulnerability allows an unauthorized remote attacker to cause a denial of service by triggering a null pointer dereference in the Storport Miniport Driver, leading to potential system crashes or service interruptions on affected Windows Server 2025 systems. There is no impact on confidentiality or integrity.

An official fix is available from Microsoft. Users should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34350 to remediate this vulnerability.