CVE-2026-34350: Windows Storport Miniport Driver Denial of Service Vulnerability

Overview

Severity
Medium (CVSS 6.5)
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Category
Denial of Service
Exploit Status
Not Exploited
Exploitation Likelihood
Unlikely
Patch Tuesday
2026-May
Released
2026-05-12

Description

Null pointer dereference in Windows Storport Miniport Driver allows an unauthorized attacker to deny service over a network.

FAQ

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do? To trigger this vulnerability, a user must actively connect to the affected server and run a specific command. The vulnerability cannot be triggered automatically or in the background; it only occurs when a user intentionally interacts with the server using this command.

Affected Products (2)

Windows

  • Windows Server 2025 (Server Core installation)
  • Windows Server 2025

Security Updates (2)

Acknowledgments

Microsoft Offensive Research & Security Engineering

Revision History

  • 2026-05-12: Information published.