CVE-2026-70017
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
Risk Assessment
An attacker could exploit the type confusion to read data, potentially leading to information disclosure.
Recommendation
Apply Windows security updates.
Other vulnerabilities in Windows Secure Kernel Mode
See all- CVE-2026-96865Medium
Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally. The flaw involves improper data separation in kernel mode.
- CVE-2026-70026High
Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-85921High
A double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-83939High
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-69846High
Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-69501High
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-50392High
A Use-After-Free vulnerability in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-42982High
Vulnerability in Windows Secure Kernel Mode due to improper validation of input consistency. An authenticated attacker can elevate privileges locally.
- CVE-2021-33744Medium
A vulnerability in Windows Secure Kernel Mode allows a security feature bypass. An attacker could exploit this flaw to bypass kernel protection mechanisms.
Original NVD description (English source)
Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS