CVE-2026-45604

27th percentile - higher than 27% of all known CVEs

Out-of-bounds read in Windows Application Identity (AppID) Subsystem allows an authorized attacker to disclose information locally.

The risk involves the possibility of local disclosure of sensitive data by an authorized attacker, which could lead to privilege escalation or further attacks.

It is recommended to apply the appropriate security update from Microsoft that fixes the out-of-bounds read vulnerability in the AppID Subsystem.