CVE-2026-37453

HighCVSS 7.5

Published: 25/06/2026(UTC)Updated: 14/07/2026(UTC)Translated: 15/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

32th percentile - higher than 32% of all known CVEs

Summary

An insecure permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensitive information via the MSI_SERVICE_2 pipe.

Risk Assessment

The organization is at risk of sensitive data leakage, which could be used for further attacks on systems and the network.

Recommendation

Immediately update MSI NBFoundation Service to the latest available version and restrict access to the MSI_SERVICE_2 pipe to trusted processes only.

Other vulnerabilities in MSI NBFoundation Service

CVE-2026-37454High
An insecure permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensitive information by exploiting 3DES-ECB encryption.

Original NVD description (English source)

Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensitive information via the MSI_SERVICE_2 pipe