{"id":"CVE-2026-108404","kind":"vulnerability","aliases":["CVE-2026-108404"],"related":[],"title":"Windows CD-ROM driver: heap overflow lets a physical attacker run code","description":"Heap-based buffer overflow in Windows CD-ROM Driver allows an unauthorized attacker to execute code with a physical attack.","summary":"A heap-based buffer overflow in the Windows CD-ROM driver lets an unauthorized attacker run code on the machine. The attack requires physical access to the device.","severity":"medium","cvss":6.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["cd-rom-driver","infrastructure","windows"],"not_affected_if":["no-physical-access"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:18:08+00:00","first_seen_at":"2026-11-10T19:24:22+00:00","triaged_at":"2026-11-10T19:55:49+00:00","updated_at":"2026-11-10T19:55:49+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:55:49Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows CD-ROM driver: heap overflow lets a physical attacker run code","impact":"high","summary":"A heap-based buffer overflow in the Windows CD-ROM driver lets an unauthorized attacker run code on the machine. The attack requires physical access to the device.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["windows","cd-rom-driver"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Attacker with physical access runs code on the machine","analyst_note":"Check the Microsoft security update guide for CVE-2026-108404 for affected Windows builds and the patch.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-physical-access"],"who_is_affected":"Windows machines with the CD-ROM driver present; exposure requires an attacker with physical access to the computer. The sources do not name affected Windows versions or the patch status.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000651,"input_tokens":4506,"output_tokens":400,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-108404':16A,19A '-2026':15A,18A 'access':52B 'allow':67C 'attack':11A,42B,49B,70C,77C 'base':29B,58C 'buffer':30B,59C 'cd':3A,21B,36B,64C 'cd-rom':2A,35B,63C 'cd-rom-driv':20B 'code':13A,44B,73C 'cve':14A,17A 'devic':55B 'driver':5A,23B,38B,66C 'execut':72C 'heap':6A,28B,57C 'heap-bas':27B,56C 'infrastructur':24B 'let':8A,39B 'machin':47B 'overflow':7A,31B,60C 'physic':10A,51B,76C 'requir':50B 'rom':4A,22B,37B,65C 'run':12A,43B 'unauthor':41B,69C 'window':1A,25B,34B,62C","nicknames":[],"mitigations":[],"who_affected":"Windows machines with the CD-ROM driver present; exposure requires an attacker with physical access to the computer. The sources do not name affected Windows versions or the patch status.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"pkeys":[],"ptokens":[],"labels":["cdromdriver","infrastructure","medium","windows"],"campaign_type":null,"search_a":"'-108404':16A,19A '-2026':15A,18A 'attack':11A 'cd':3A 'cd-rom':2A 'code':13A 'cve':14A,17A 'driver':5A 'heap':6A 'let':8A 'overflow':7A 'physic':10A 'rom':4A 'run':12A 'window':1A","search_b":"'access':52B 'attack':42B,49B 'base':29B 'buffer':30B 'cd':21B,36B 'cd-rom':35B 'cd-rom-driv':20B 'code':44B 'devic':55B 'driver':23B,38B 'heap':28B 'heap-bas':27B 'infrastructur':24B 'let':39B 'machin':47B 'overflow':31B 'physic':51B 'requir':50B 'rom':22B,37B 'run':43B 'unauthor':41B 'window':25B,34B","search_c":"'allow':67C 'attack':70C,77C 'base':58C 'buffer':59C 'cd':64C 'cd-rom':63C 'code':73C 'driver':66C 'execut':72C 'heap':57C 'heap-bas':56C 'overflow':60C 'physic':76C 'rom':65C 'unauthor':69C 'window':62C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:18:08+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-108404","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108404","severity":null,"published_at":"2026-11-10T19:18:08+00:00","modified_at":"2026-11-10T19:18:09+00:00","first_seen_at":"2026-11-10T19:24:22+00:00","fetched_at":"2026-11-10T19:24:22+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}