CVE-2026-70569: CWE-125: Out-of-bounds Read in Microsoft Windows 11 version 23H2

This vulnerability, tracked as CVE-2026-70569, is an out-of-bounds read issue in the Windows Spaceport.sys driver. It permits a local attacker with authorized access to execute a privilege escalation attack, potentially gaining higher system privileges. The vulnerability affects several builds of Windows 11 version 23H2, specifically versions from 10.0.20348.0 up to but not including 10.0.20348.5622, 10.0.22631.0 up to but not including 10.0.22631.7582, 10.0.26100.0 up to but not including 10.0.26100.9445 and 10.0.26100.0 up to but not including 10.0.26100.33438, 10.0.26200.0 up to but not including 10.0.26200.9445, and 10.0.28000.0 up to but not including 10.0.28000.2954. The CVSS v3.1 base score is 7.8, indicating high severity. Microsoft has issued an official fix for this vulnerability.

Successful exploitation allows an authorized local attacker to perform privilege escalation, gaining elevated system privileges. This can lead to full system compromise, including confidentiality, integrity, and availability impacts rated high by the CVSS vector. There are no known exploits in the wild as of the published date.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 11 23H2 builds as soon as possible. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70569 for detailed patch information and update instructions.