Historical advisory recorded 10 Nov 2026 23:21:22 UTC. Read the latest advisory.
cve-program · CVE-2026-61359
Published
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
Read the publisher's advisoryAffected versions, risk and source history
cve-program · CVE-2026-61359
PublishedWindows 11 version 23H2
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows 11 version 23H2",
"platforms": [
"ARM64-based Systems"
],
"versions": [
{
"version": "10.0.22631.0",
"lessThan": "10.0.22631.7517",
"versionType": "custom",
"status": "affected"
}
]
}Windows 11 Version 23H2
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows 11 Version 23H2",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.22631.0",
"lessThan": "10.0.22631.7517",
"versionType": "custom",
"status": "affected"
}
]
}Windows 11 Version 24H2
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows 11 Version 24H2",
"platforms": [
"ARM64-based Systems",
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26100.0",
"lessThan": "10.0.26100.9168",
"versionType": "custom",
"status": "affected"
}
]
}Windows 11 Version 25H2
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows 11 Version 25H2",
"platforms": [
"ARM64-based Systems",
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26200.0",
"lessThan": "10.0.26200.9168",
"versionType": "custom",
"status": "affected"
}
]
}Windows 11 version 26H1
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows 11 version 26H1",
"platforms": [
"ARM64-based Systems",
"x64-based Systems"
],
"versions": [
{
"version": "10.0.28000.0",
"lessThan": "10.0.28000.2704",
"versionType": "custom",
"status": "affected"
}
]
}Windows Server 2022
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows Server 2022",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.20348.0",
"lessThan": "10.0.20348.5499",
"versionType": "custom",
"status": "affected"
}
]
}Windows Server 2025
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows Server 2025",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26100.0",
"lessThan": "10.0.26100.33296",
"versionType": "custom",
"status": "affected"
}
]
}Windows Server 2025 (Server Core installation)
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Windows Server 2025 (Server Core installation)",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26100.0",
"lessThan": "10.0.26100.33296",
"versionType": "custom",
"status": "affected"
}
]
}Original source record · Cite this exact observation · Complete original publisher JSON