{
  "cveId": "CVE-2026-77572",
  "url": "https://patchblox.com/security/cve/CVE-2026-77572",
  "summary": "CVE-2026-77572 is fixed in VeraCrypt on 1 platform by VeraCrypt 1.26.31 (version 1.26.31), released November 2, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "VeraCrypt: Missing authorization on veracrypt.sys IOCTLs exposes disk topology, symlink targets, and DeviceObject reference count to any client of \\\\.\\VeraCrypt",
  "description": "VeraCrypt provides disk encryption with strong security based on TrueCrypt. In 1.26.29 and earlier, selected metadata IOCTL handlers in the VeraCrypt Windows veracrypt.sys driver accept caller-supplied object-manager and device paths broader than supported VeraCrypt workflows require. A local user who can open the intentionally user-accessible \\.\\VeraCrypt device can use TC_IOCTL_GET_RESOLVED_SYMLINK, TC_IOCTL_GET_DRIVE_PARTITION_INFO, VC_IOCTL_GET_DRIVE_GEOMETRY_EX, or the legacy TC_IOCTL_GET_DRIVE_GEOMETRY handler to make src/Driver/Ntdriver.c perform kernel-context symbolic-link or disk-device lookups outside the intended path scope. This can disclose low-sensitivity drive-letter targets, partition information, disk geometry, GPT or MBR state, and limited object-manager path metadata.",
  "published": "2026-10-14T16:17:53Z",
  "severity": "",
  "cvss": 3.3,
  "cwe": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
  "epss": 0.00096,
  "epssPercentile": 0.00699,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2026-77572",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "VeraCrypt",
      "fixedVersion": "1.26.31",
      "fix": "VeraCrypt 1.26.31",
      "url": "https://patchblox.com/security/fix/windows-app/idrix.veracrypt-1.26.31",
      "released": "2026-11-02T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}