Microsoft Storport.sys Driver Privilege Escalation Vulnerability

A buffer over-read vulnerability has been identified in the Storport.sys driver, allowing an authorized attacker to locally elevate privileges. This vulnerability affects multiple Windows operating systems, including various versions of Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, Windows Server 2022, and Windows Server 2025.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update KB5066835 for Windows 11, KB5066836 for Windows Server 2016 and 2022, and KB5066791 for Windows 10. For Windows Server 2019, the security update is KB5066586.