CVE Catalog
CVE-2026-20932
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.65%
48th percentile - higher than 48% of all known CVEs
Summary
An exposure of sensitive information in Windows File Explorer allows an authorized attacker to disclose information locally.
Risk Assessment
An attacker with a user account could read confidential files or data they should not access, compromising confidentiality.
Recommendation
Apply the Microsoft security update and review file and folder permissions.
Original NVD description (English source)
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.