CVE-2026-32081
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
Risk Assessment
An authorized attacker with local access can obtain sensitive information via Windows File Explorer, potentially leading to a breach of data confidentiality. The risk applies to organizations where an attacker can gain local access to the system.
Recommendation
Apply security updates provided by Microsoft for Windows File Explorer. Additionally, restrict local access to the system and monitor for unusual activity.
Other vulnerabilities in Windows File Explorer
See all- CVE-2026-57084Medium
A vulnerability in Windows File Explorer involves the use of an uninitialized resource. An unauthorized attacker can disclose information locally.
- CVE-2026-50473Medium
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
- CVE-2026-50456Medium
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
- CVE-2026-50442Medium
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
- CVE-2026-50389Medium
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
- CVE-2026-41087Medium
A vulnerability in Windows File Explorer allows an authorized attacker to disclose sensitive information locally. The issue stems from improper access control to data.
- CVE-2026-40422Medium
Use of uninitialized resource in Windows File Explorer allows an authorized attacker to disclose information locally.
- CVE-2026-33842Medium
A vulnerability in Windows File Explorer allows an authorized attacker to disclose sensitive information locally.
- CVE-2026-32084Medium
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
- CVE-2026-32079Medium
A vulnerability in Windows File Explorer involves exposure of sensitive information to an unauthorized actor. An authorized attacker can exploit this flaw to disclose information locally.
Original NVD description (English source)
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS