CVE-2026-108405
Integer overflow or wraparound in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
CVSS
7.8
High
EPSS
—
KEV
—
Exploit Today
0
0-100
Published: Nov 10, 2026 · Last modified: Nov 10, 2026 · CWE-190
Not enough EPSS history yet.
Integer overflow or wraparound in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-969826.8 MED—
——0Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.4hCVE-2026-969796.8 MED—
——0Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.4hCVE-2026-969746.8 MED—
——0Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.4hCVE-2026-961347.5 HIG—
——0Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network.4hCVE-2026-960679.8 CRI—
——0Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network.3hCVE-2026-960547.0 HIG—
——0Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code locally.4h