CVE Catalog

CVE-2026-62746

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.39%

32th percentile - higher than 32% of all known CVEs

Summary

A buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally.

Risk Assessment

Local information disclosure by an authenticated user could expose sensitive system data to unauthorized access.

Recommendation

Install the latest Windows updates and monitor local user activity.

Original NVD description (English source)

Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS