Microsoft Windows Volume Manager Extension Driver Heap-Based Buffer Overflow Vulnerability Allowing Remote Code Execution

A heap-based buffer overflow vulnerability has been identified in the Volume Manager Extension Driver. This vulnerability allows an authorized attacker to execute code, but requires a physical attack. It affects multiple Windows products, including various versions of Windows Server, Windows 10, and Windows 11.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the affected system.

Remediation

Users can apply the security update for this vulnerability, which is included in the May 2026 security update rollups for the affected Windows versions. Instructions for downloading the security update are available through the Microsoft Update Catalog.