cve-2026-56172

CVE-2026-56172 is a Windows VHD miniport driver elevation of privilege vulnerability that Microsoft addressed with security fixes across a broad range of Windows client and server releases. The flaw is a use-after-free weakness in the component that handles virtual hard-disk operations, meaning memory can be improperly used after it has been released. According to Microsoft, an authorized attacker could exploit the issue locally to elevate privileges, potentially reaching the operating system's most powerful security context. This tag collects WindowsForum coverage of the vulnerability, its severity rating, affected platforms, and the patching guidance available to administrators and users.