CVE-2026-32216

MEDIUM

Windows Redirected Drive Buffering System Denial of Service Vulnerability

Title source: cna
STIX 2.1

Description

Null pointer dereference in Windows Redirected Drive Buffering allows an authorized attacker to deny service locally.

References (1)

Scores

CVSS v3 5.5
EPSS 0.0004
EPSS Percentile 12.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-476
Status published
Products (2)
Microsoft/Windows 11 version 26H1 10.0.28000.0 - 10.0.28000.1836
microsoft/windows_11_26h1 < 10.0.28000.1836 (2 CPE variants)
Published Apr 14, 2026
Tracked Since Apr 14, 2026