CVE-2026-78451

A vulnerability in the Microsoft Windows SCSI Class System File allows an unauthorized attacker to exploit an untrusted pointer dereference, potentially leading to privilege escalation through physical access to the system. This issue poses a medium risk, particularly for environments where physical security cannot be guaranteed. Organizations using affected Windows products should prioritize patching to mitigate the risk of unauthorized access.