CVE-2026-41087
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
A vulnerability in Windows File Explorer allows an authorized attacker to disclose sensitive information locally. The issue stems from improper access control to data.
Risk Assessment
The organization is at risk of leaking confidential data stored locally, which may lead to security policy violations.
Recommendation
It is recommended to immediately apply the security update provided by the vendor for Windows.
Other vulnerabilities in Windows File Explorer
See all- CVE-2026-57084Medium
A vulnerability in Windows File Explorer involves the use of an uninitialized resource. An unauthorized attacker can disclose information locally.
- CVE-2026-50473Medium
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
- CVE-2026-50456Medium
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
- CVE-2026-50442Medium
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
- CVE-2026-50389Medium
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
- CVE-2026-40422Medium
Use of uninitialized resource in Windows File Explorer allows an authorized attacker to disclose information locally.
- CVE-2026-33842Medium
A vulnerability in Windows File Explorer allows an authorized attacker to disclose sensitive information locally.
- CVE-2026-20939Medium
An exposure of sensitive information vulnerability in Windows File Explorer allows an authorized attacker to disclose information locally.
- CVE-2026-20937Medium
An exposure of sensitive information vulnerability in Windows File Explorer allows an authorized attacker to disclose information locally.
- CVE-2026-20932Medium
An exposure of sensitive information in Windows File Explorer allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.