CVE-2026-26169

MediumCVSS 6.1

Published: 14/04/2026(UTC)Updated: 25/10/2026(UTC)Translated: 15/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.31%

83th percentile - higher than 83% of all known CVEs

Summary

Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally.

Risk Assessment

A local attacker could disclose sensitive information from kernel memory, potentially leading to data leakage. This could be used as part of a larger attack on a Windows system.

Recommendation

Apply Microsoft security updates for Windows Kernel Memory. Restrict local access to the system to trusted users.

Other vulnerabilities in Windows Kernel Memory

CVE-2026-20809High
A time-of-check time-of-use (TOCTOU) race condition in Windows Kernel Memory allows an authorized attacker to elevate privileges locally.

Original NVD description (English source)

Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS