CVE-2026-68852

MediumCVSS 5.5

Published: 08/09/2026(UTC)Updated: 08/09/2026(UTC)Translated: 09/09/2026(UTC)NVD NIST

Summary

A vulnerability in Microsoft Account involves the use of an uninitialized resource. An authorized attacker could exploit this to disclose information locally.

Risk Assessment

Local data leakage is possible, which could compromise the confidentiality of information stored on the system.

Recommendation

Apply security updates provided by Microsoft. Monitor systems for unusual activity.

Other vulnerabilities in Microsoft Account

See all

CVE-2026-68850High
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.
CVE-2026-56165Critical
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network.

Original NVD description (English source)

Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally.