CVE-2026-78454

An out-of-bounds read vulnerability in the Windows CD-ROM Driver can be exploited by an authorized attacker to disclose sensitive information locally. This issue poses a medium risk, particularly for environments where users have access to potentially malicious media. Organizations utilizing affected Windows systems should prioritize patching to mitigate the risk of information disclosure.