[Japanese]

JVNDB-2026-029749

Security information for Hitachi Disk Array Systems

Overview

CVE-2026-33828 | Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability
CVE-2026-34335 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2026-40404 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
CVE-2026-40409 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
CVE-2026-41092 | Microsoft Kinect Elevation of Privilege Vulnerability
CVE-2026-41108 | Windows DNS Client Elevation of Privilege Vulnerability
CVE-2026-42828 | Windows Projected File System Elevation of Privilege Vulnerability
CVE-2026-42836 | Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
CVE-2026-42837 | Windows Projected File System Elevation of Privilege Vulnerability
CVE-2026-42903 | Windows Kerberos Denial of Service Vulnerability
CVE-2026-42904 | Windows TCP/IP Elevation of Privilege Vulnerability
CVE-2026-42905 | Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2026-42906 | Windows Shell Information Disclosure Vulnerability
CVE-2026-42907 | Windows Shell Information Disclosure Vulnerability
CVE-2026-42908 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
CVE-2026-42909 | Remote Desktop Client Remote Code Execution Vulnerability
CVE-2026-42911 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2026-42912 | Windows Telephony Service Elevation of Privilege Vulnerability
CVE-2026-42914 | Windows Kerberos Denial of Service Vulnerability
CVE-2026-42915 | Windows TCP/IP Denial of Service Vulnerability
CVE-2026-42916 | NT OS Kernel Elevation of Privilege Vulnerability
CVE-2026-42968 | Windows Telephony Server Information Disclosure Vulnerability
CVE-2026-42969 | Windows Push Notification Information Disclosure Vulnerability
CVE-2026-42970 | Windows Push Notification Information Disclosure Vulnerability
CVE-2026-42971 | Windows Push Notification Information Disclosure Vulnerability
CVE-2026-42972 | Windows Hyper-V Information Disclosure Vulnerability
CVE-2026-42973 | Windows Push Notification Information Disclosure Vulnerability
CVE-2026-42977 | Windows Push Notifications Elevation of Privilege Vulnerability
CVE-2026-42978 | Windows Push Notifications Elevation of Privilege Vulnerability
CVE-2026-42979 | Windows Push Notifications Elevation of Privilege Vulnerability
CVE-2026-42980 | NT OS Kernel Elevation of Privilege Vulnerability
CVE-2026-42983 | Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2026-42984 | Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-42985 | Remote Desktop Client Remote Code Execution Vulnerability
CVE-2026-42986 | Microsoft Graphics Component Elevation of Privilege Vulnerability
CVE-2026-42989 | Winlogon Elevation of Privilege Vulnerability
CVE-2026-42991 | Windows Push Notifications Elevation of Privilege Vulnerability
CVE-2026-42992 | Remote Desktop Client Remote Code Execution Vulnerability
CVE-2026-42993 | Remote Desktop Client Remote Code Execution Vulnerability
CVE-2026-44799 | Remote Desktop Client Remote Code Execution Vulnerability
CVE-2026-44801 | Remote Desktop Client Remote Code Execution Vulnerability
CVE-2026-44802 | Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2026-44803 | Windows Graphics Component Remote Code Execution Vulnerability
CVE-2026-44812 | Windows Graphics Component Remote Code Execution Vulnerability
CVE-2026-44815 | DHCP Client Service Remote Code Execution Vulnerability
CVE-2026-45487 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
CVE-2026-45586 | Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability
CVE-2026-45588 | Secure Boot Security Feature Bypass Vulnerability
CVE-2026-45592 | Windows Internet (wininet.dll) Elevation of Privilege Vulnerability
CVE-2026-45593 | Windows SDK Elevation of Privilege Vulnerability
CVE-2026-45594 | Windows Application Identity (AppID) Information Disclosure Vulnerability
CVE-2026-45595 | Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2026-45596 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2026-45598 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2026-45599 | Windows UPnP Device Host Remote Code Execution Vulnerability
CVE-2026-45601 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2026-45602 | Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability
CVE-2026-45603 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2026-45605 | Windows Bluetooth Service Elevation of Privilege Vulnerability
CVE-2026-45606 | Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability
CVE-2026-45607 | Windows Hyper-V Remote Code Execution Vulnerability
CVE-2026-45608 | Windows DHCP Client Information Disclosure Vulnerability
CVE-2026-45634 | Windows DHCP Client Information Disclosure Vulnerability
CVE-2026-45635 | Windows UPnP Device Host Remote Code Execution Vulnerability
CVE-2026-45636 | Windows NTFS Remote Code Execution Vulnerability
CVE-2026-45637 | Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2026-45638 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2026-45639 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
CVE-2026-45640 | Windows Bluetooth Port Driver Elevation of Privilege Vulnerability
CVE-2026-45641 | Windows Hyper-V Remote Code Execution Vulnerability
CVE-2026-45642 | Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability
CVE-2026-45653 | Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-45655 | Windows BitLocker Security Feature Bypass Vulnerability
CVE-2026-45656 | UEFI Secure Boot Security Feature Bypass Vulnerability
CVE-2026-45658 | Windows BitLocker Security Feature Bypass Vulnerability
CVE-2026-47289 | Remote Desktop Client Remote Code Execution Vulnerability
CVE-2026-47291 | HTTP.sys Remote Code Execution Vulnerability
CVE-2026-47648 | Windows Storage Elevation of Privilege Vulnerability
CVE-2026-47653 | Remote Desktop Client Remote Code Execution Vulnerability
CVE-2026-47656 | Windows Boot Manager Security Feature Bypass Vulnerability
CVE-2026-48563 | Remote Desktop Client Remote Code Execution Vulnerability
CVE-2026-48568 | Secure Boot Security Feature Bypass Vulnerability
CVE-2026-48570 | Secure Boot Security Feature Bypass Vulnerability
CVE-2026-48573 | Secure Boot Security Feature Bypass Vulnerability
CVE-2026-48574 | Windows Media Remote Code Execution Vulnerability
CVE-2026-48575 | Secure Boot Security Feature Bypass Vulnerability
CVE-2026-48576 | Secure Boot Security Feature Bypass Vulnerability
CVE-2026-48578 | Secure Boot Security Feature Bypass Vulnerability
CVE-2026-48583 | Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-49160 | HTTP.sys Denial of Service Vulnerability
CVE-2026-50507 | Windows BitLocker Security Feature Bypass Vulnerability
CVE-2026-8863 | UEFI Secure Boot Security Feature Bypass Vulnerability
CVSS Severity (What is CVSS?)

Affected Products


Hitachi, Ltd
  • Hitachi Virtual Storage Platform 5100 [Windows 10 for x64-based Systems (Version1809)] (CVE-2026-33828, ...)
  • Hitachi Virtual Storage Platform 5100 [Windows 10 for x64-based Systems (Version21H2)] (CVE-2026-33828, ...)
  • Hitachi Virtual Storage Platform 5100H [Windows 10 for x64-based Systems (Version1809)] (CVE-2026-33828, ...)
  • Hitachi Virtual Storage Platform 5100H [Windows 10 for x64-based Systems (Version21H2)] (CVE-2026-33828, ...)
  • Hitachi Virtual Storage Platform 5200 [Windows 10 for x64-based Systems (Version1809)] (CVE-2026-33828, ...)
  • Hitachi Virtual Storage Platform 5200 [Windows 10 for x64-based Systems (Version21H2)] (CVE-2026-33828, ...)
  • Hitachi Virtual Storage Platform 5200H [Windows 10 for x64-based Systems (Version1809)] (CVE-2026-33828, ...)
  • Hitachi Virtual Storage Platform 5200H [Windows 10 for x64-based Systems (Version21H2)] (CVE-2026-33828, ...)
  • Hitachi Virtual Storage Platform 5500 [Windows 10 for x64-based Systems (Version1809)] (CVE-2026-33828, ...)
  • Hitachi Virtual Storage Platform 5500 [Windows 10 for x64-based Systems (Version21H2)] (CVE-2026-33828, ...)
  • Hitachi Virtual Storage Platform 5500H [Windows 10 for x64-based Systems (Version1809)] (CVE-2026-33828, ...)
  • Hitachi Virtual Storage Platform 5500H [Windows 10 for x64-based Systems (Version21H2)] (CVE-2026-33828, ...)
  • Hitachi Virtual Storage Platform 5600 [Windows 10 for x64-based Systems (Version1809)] (CVE-2026-33828, ...)
  • Hitachi Virtual Storage Platform 5600 [Windows 10 for x64-based Systems (Version21H2)] (CVE-2026-33828, ...)
  • Hitachi Virtual Storage Platform 5600H [Windows 10 for x64-based Systems (Version1809)] (CVE-2026-33828, ...)
  • Hitachi Virtual Storage Platform 5600H [Windows 10 for x64-based Systems (Version21H2)] (CVE-2026-33828, ...)

Please refer to Vendor Information for more details.
Impact

Regarding the impact of the vulnerability, please refer to the vendor advisory.
Solution

Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action.
Vendor Information

Hitachi, Ltd
CWE (What is CWE?)

CVE (What is CVE?)

  1. CVE-2026-33828
  2. CVE-2026-34335
  3. CVE-2026-40404
  4. CVE-2026-40409
  5. CVE-2026-41092
  6. CVE-2026-41108
  7. CVE-2026-42828
  8. CVE-2026-42836
  9. CVE-2026-42837
  10. CVE-2026-42903
  11. CVE-2026-42904
  12. CVE-2026-42905
  13. CVE-2026-42906
  14. CVE-2026-42907
  15. CVE-2026-42908
  16. CVE-2026-42909
  17. CVE-2026-42911
  18. CVE-2026-42912
  19. CVE-2026-42914
  20. CVE-2026-42915
  21. CVE-2026-42916
  22. CVE-2026-42968
  23. CVE-2026-42969
  24. CVE-2026-42970
  25. CVE-2026-42971
  26. CVE-2026-42972
  27. CVE-2026-42973
  28. CVE-2026-42977
  29. CVE-2026-42978
  30. CVE-2026-42979
  31. CVE-2026-42980
  32. CVE-2026-42983
  33. CVE-2026-42984
  34. CVE-2026-42985
  35. CVE-2026-42986
  36. CVE-2026-42989
  37. CVE-2026-42991
  38. CVE-2026-42992
  39. CVE-2026-42993
  40. CVE-2026-44799
  41. CVE-2026-44801
  42. CVE-2026-44802
  43. CVE-2026-44803
  44. CVE-2026-44812
  45. CVE-2026-44815
  46. CVE-2026-45487
  47. CVE-2026-45586
  48. CVE-2026-45588
  49. CVE-2026-45592
  50. CVE-2026-45593
  51. CVE-2026-45594
  52. CVE-2026-45595
  53. CVE-2026-45596
  54. CVE-2026-45598
  55. CVE-2026-45599
  56. CVE-2026-45601
  57. CVE-2026-45602
  58. CVE-2026-45603
  59. CVE-2026-45605
  60. CVE-2026-45606
  61. CVE-2026-45607
  62. CVE-2026-45608
  63. CVE-2026-45634
  64. CVE-2026-45635
  65. CVE-2026-45636
  66. CVE-2026-45637
  67. CVE-2026-45638
  68. CVE-2026-45639
  69. CVE-2026-45640
  70. CVE-2026-45641
  71. CVE-2026-45642
  72. CVE-2026-45653
  73. CVE-2026-45655
  74. CVE-2026-45656
  75. CVE-2026-45658
  76. CVE-2026-47289
  77. CVE-2026-47291
  78. CVE-2026-47648
  79. CVE-2026-47653
  80. CVE-2026-47656
  81. CVE-2026-48563
  82. CVE-2026-48568
  83. CVE-2026-48570
  84. CVE-2026-48573
  85. CVE-2026-48574
  86. CVE-2026-48575
  87. CVE-2026-48576
  88. CVE-2026-48578
  89. CVE-2026-48583
  90. CVE-2026-49160
  91. CVE-2026-50507
  92. CVE-2026-8863
References

Revision History

  • [2026/08/24]
      Web page was published