CVE-2026-97805
Windows Partition Management Driver Remote Code Execution vulnerability
MSRC advisory October 13, 2026
Alert details
- Source feed
- Microsoft MSRC
- CVE ID
- CVE-2026-97805
- CWE
- CWE-20CWE-125
- Affected products
- Windows Partition Management Driver Remote Code Execution · Microsoft Windows Partition Management Driver Remote Code Execution · Microsoft
What happened
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
What it means for your business
Windows Partition Management Driver Remote Code Execution vulnerability (CVE-2026-97805) was added to Microsoft’s security update guidance. Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network. If you need help checking exposure, call (864) 335-9223.
CVSS score
9.8 (Critical)
EPSS probability
0.94%
Sources
Related briefs
Microsoft Exchange Online Remote Code Execution vulnerability
Microsoft Exchange Online Remote Code Execution vulnerability (CVE-2026-96185) was added to Microsoft’s security update guidance. Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network. If you need help checking exposure, call (864) 335-9223.
Azure Kubernetes Configuration Service Elevation of Privilege vulnerability
Azure Kubernetes Configuration Service Elevation of Privilege vulnerability (CVE-2026-83938) was added to Microsoft’s security update guidance. Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network. If you need help checking exposure, call (864) 335-9223.
Azure AI Foundry Elevation of Privilege vulnerability
Azure AI Foundry Elevation of Privilege vulnerability (CVE-2026-108456) was added to Microsoft’s security update guidance. Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network. If you need help checking exposure, call (864) 335-9223.
Azure Pipelines Remote Code Execution vulnerability
Azure Pipelines Remote Code Execution vulnerability (CVE-2026-105014) was added to Microsoft’s security update guidance. Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network. If you need help checking exposure, call (864) 335-9223.
Need help patching?
PremierePC monitors KEV alerts for managed clients and helps teams prioritize remediation before attackers do.