CVE-2026-59125

This bug is in a Windows driver that helps the system work with “virtual hard disks.” If a person already able to log in with low privileges finds the right way to trigger the bug, they can jump to full system control—like getting the keys to the building, then bypassing security doors.
Because it’s local and requires authentication, it’s not usually something outsiders can do directly from the internet.

This matters if you use or manage Windows 10, Windows 11, or Windows Server 2016/2019/2022/2025 devices, because the vulnerable Virtual Hard Disk (VHD) miniport driver is part of Windows.
It primarily becomes a concern when an attacker already has low-privilege local access (since authentication is required) and can attempt the triggering conditions on that machine. Reachability in the default configuration is not yet known from the provided findings, so the safe rule is: treat any device with local logon exposure as in-scope.

Verdict: RED. This is a privilege-escalation bug that can execute arbitrary code with elevated privileges once a local low-privilege attacker can trigger it.
Even though there’s no confirmed dated public exploit report for this exact CVE in the provided findings, it has patch-focused press attention and is tied to a known actor in the provided pulse data, so you should treat it as an urgent patching priority.