CVE-2026-69294
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
A vulnerability in Microsoft COM for Windows causes error messages to contain sensitive information. This allows an authorized attacker to disclose information locally.
Risk Assessment
The risk is potential local leakage of confidential data, which may compromise information security in the organization.
Recommendation
Apply security updates provided by Microsoft and restrict local access to systems.
Other vulnerabilities in Microsoft COM
See all- CVE-2026-69909High
Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
- CVE-2026-69299High
Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
- CVE-2026-59136Medium
Use of an uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS