CVE-2026-69507
MediumCVSS 5.7Exploitation Probability (EPSS)
Elevated risk56th percentile - higher than 56% of all known CVEs
Summary
A vulnerability in the Windows Search component allows insertion of sensitive information into an externally accessible file or directory. An authorized attacker could exploit this to disclose information over a network.
Risk Assessment
Risk of exposing confidential organizational data to authorized network users, potentially leading to confidentiality breaches.
Recommendation
Apply the latest security updates provided by Microsoft for the Windows Search component.
Other vulnerabilities in Microsoft Windows Search
See all- CVE-2017-11772High
The Microsoft Windows Search component on various versions of the operating system allows information disclosure due to improper handling of objects in memory. This vulnerability affects multiple versions of Windows, including Windows Server 2008, Windows 7, Windows 8.1, Windows 10, and Windows Server 2016.
- CVE-2026-105010Critical
Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.
- CVE-2017-11771Critical
The Windows Search component on various versions of Microsoft Windows allows remote code execution due to improper handling of DNS responses.
- CVE-2026-83921High
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- CVE-2026-83920High
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- CVE-2026-69305High
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
Original NVD description (English source)
Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS