CVE Catalog
CVE-2026-57097
MediumCVSS 6.4Exploitation Probability (EPSS)
Low risk0.32%
24th percentile - higher than 24% of all known CVEs
Summary
In Microsoft XML, there is an untrusted search path vulnerability. An unauthorized attacker can bypass a security feature through a physical attack.
Risk Assessment
A physical attack could bypass security measures and lead to unauthorized system access.
Recommendation
Apply security updates provided by the vendor and restrict physical access to devices.
Other vulnerabilities in Microsoft XML
Original NVD description (English source)
Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS