CVE-2026-69573: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
Details
Original advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69573
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-69573 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
Recent advisories for Windows Universal Disk
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- highCVE-2026-69758: Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows a…nvd · 2026-09-08
- highCVE-2026-69592: Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows a…nvd · 2026-09-08
- highCVE-2026-69573: Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized…nvd · 2026-09-08
- highCVE-2026-69592: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerabilitymsrc · 2026-09-08
- highCVE-2026-69758: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerabilitymsrc · 2026-09-08
- mediumCVE-2026-62699: Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows a…nvd · 2026-08-11
More from Microsoft Security Response Center
- mediumCVE-2026-18924: HTTP/2 server push UAF2026-09-08
- highCVE-2026-69630: Windows Win32k Elevation of Privilege Vulnerability2026-09-08
- unknownCVE-2026-83616: xmldom: Processing Instruction Target Injection Bypasses requireWellFormed2026-09-08
- unknownCVE-2026-85062: Colord: Slow rejection of oversized malformed color strings2026-09-08
- mediumCVE-2026-80834: crypto: sun8i-ce - Remove crypto_rng interface2026-09-08