CVE-2026-72952

An out-of-bounds read vulnerability in Windows Spaceport.sys can be exploited by an authorized attacker to execute arbitrary code locally, potentially compromising system integrity. Organizations using affected Windows systems should prioritize patching this vulnerability to mitigate the risk of local code execution by malicious insiders or compromised accounts.