CVE Catalog
CVE-2026-20838
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.63%
47th percentile - higher than 47% of all known CVEs
Summary
Generation of error messages containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally.
Risk Assessment
An attacker could obtain system details like memory addresses or paths, facilitating further kernel attacks.
Recommendation
Install the Windows security update and restrict access to system logs.
Original NVD description (English source)
Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally.