CVE-2023-36906
MediumCVSS 5.5Exploitation Probability (EPSS)
High risk79th percentile - higher than 79% of all known CVEs
Summary
A vulnerability in Windows Cryptographic Services allows for information disclosure. An attacker could exploit this flaw to gain access to sensitive data.
Risk Assessment
Information disclosure could lead to further attacks on the system, including data theft or breaches of user privacy.
Recommendation
It is recommended to update Windows to the latest version to patch this vulnerability and to monitor the system for unauthorized access.
Other vulnerabilities in Windows Cryptographic Services
See all- CVE-2026-40377High
Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally.
- CVE-2026-50681Medium
Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
- CVE-2026-50352Medium
Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
- CVE-2026-50302Medium
Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-44806Medium
Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.
- CVE-2026-44810High
Improper authentication in Windows Cryptographic Services allows an unauthorized attacker to elevate privileges locally.
- CVE-2024-30096Medium
A vulnerability in Windows Cryptographic Services allows information disclosure. An attacker could exploit this flaw to read sensitive data stored in system memory.
- CVE-2023-36907Medium
A vulnerability in Windows Cryptographic Services may lead to information disclosure. An attacker could exploit this flaw to gain access to sensitive data.
Original NVD description (English source)
Windows Cryptographic Services Information Disclosure Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS