CVE-2026-69575

CVE-2026-69575 is a use-after-free memory-safety flaw (CWE-416) in the Windows Storage Spaces Controller, the component that manages Storage Spaces virtual disks on Windows. A local attacker who already holds a valid low-privileged account can trigger the flaw, though the CVSS attack-complexity rating of high suggests reliable exploitation requires specific timing or system conditions. Successful exploitation elevates the attacker's privileges on the local machine, granting administrative-level ability to read and modify data and to disrupt the system. Any Windows edition that ships the Storage Spaces Controller is affected, with practical risk concentrated on hosts where multiple or untrusted users can sign in locally. Exploitation status is currently quiet: no public proof-of-concept, no CISA KEV listing, and EPSS assigns only a 0.3% probability of exploitation in the next 30 days.

What to do: Apply the Microsoft security update addressing CVE-2026-69575 on all supported Windows clients and servers via Windows Update/WSUS when released, prioritizing multi-user servers and hosts running Storage Spaces or Storage Spaces Direct. Until patching is complete, restrict local interactive and RDP logon rights to trusted accounts, since exploitation requires an authorized local session. After deploying the update, verify the patched Storage Spaces component is present on storage-heavy servers.