CVE-2026-69506
MediumCVSS 4.7Summary
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
Risk Assessment
An attacker with local access could read sensitive data from process memory, potentially resulting in leakage of confidential information.
Recommendation
Install available Windows security patches and limit the ability to run untrusted code on workstations.
Other vulnerabilities in Windows Key Storage Provider
See all- CVE-2026-88140Medium
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
- CVE-2021-38624Medium
A security feature bypass vulnerability in Windows Key Storage Provider allows an attacker to bypass key protection mechanisms. This could lead to unauthorized access to cryptographic keys and protected data.
Original NVD description (English source)
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS