CVE-2026-69919
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
An out-of-bounds read vulnerability in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
Risk Assessment
An attacker with valid credentials could exploit this flaw to read data outside the permitted memory range, potentially resulting in local information leakage.
Recommendation
Apply Windows security patches and restrict local user privileges to the minimum necessary.
Other vulnerabilities in Windows Cryptographic Services
See all- CVE-2026-40377High
Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally.
- CVE-2026-70055Medium
Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
- CVE-2026-70014High
Use after free in Windows Cryptographic Services allows an unauthorized attacker to execute code over a network.
- CVE-2026-50681Medium
Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
- CVE-2026-50352Medium
Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
- CVE-2026-50302Medium
Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-44806Medium
Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.
- CVE-2026-44810High
Improper authentication in Windows Cryptographic Services allows an unauthorized attacker to elevate privileges locally.
- CVE-2024-30096Medium
A vulnerability in Windows Cryptographic Services allows information disclosure. An attacker could exploit this flaw to read sensitive data stored in system memory.
- CVE-2023-36907Medium
A vulnerability in Windows Cryptographic Services may lead to information disclosure. An attacker could exploit this flaw to gain access to sensitive data.
Original NVD description (English source)
Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS