Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.
Critical 9.8
CVE-2026-70275
Microsoft Windows 10 1607 — Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute…
WeaknessCWE-822
Published Updated Source NVD
CVSS 3.1
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploit chance, 30 days
0.9%
Higher than 60% of all CVEs (EPSS)
Status
No known exploitation
Not in CISA KEV
Patch
Unknown
Check the vendor advisory
What happened
What to do
- 01Check whether you run Microsoft Windows 10 1607, and which version.
- 02Follow the vendor advisory for a fix or a workaround.
References
Timeline · UTC
- Published to NVD
- NVD record updated
Also actively exploited
Other CVEs in Microsoft Windows 10 1607
39 more CVEs
9.8Microsoft Windows 10 1607 — buffer overflow.EPSS 1.1%9.8Microsoft Windows 10 1607 — buffer overflow.EPSS 0.9%9.8Microsoft Windows 10 1607 — improper input validation.EPSS 1.1%9.8Microsoft Windows 10 1607 — use-after-free.EPSS 0.9%9.8Microsoft Windows 10 1607 — Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over…EPSS 1.0%9.8Microsoft Windows 10 1607 — Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to…EPSS 0.6%