CVE-2026-70090
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.
Risk Assessment
An attacker with local access could obtain sensitive data, potentially leading to privilege escalation or data theft.
Recommendation
Install the latest Windows security updates to mitigate this vulnerability.
Other vulnerabilities in Windows Netlogon
See all- CVE-2026-72982Critical
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-41089Critical
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
- CVE-2026-70072Medium
Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.
- CVE-2026-70025Medium
Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.
- CVE-2026-62759High
Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.
- CVE-2026-50500High
A Use-After-Free vulnerability in Windows Netlogon allows an authorized attacker to remotely elevate privileges over a network. The issue stems from improper memory management during authentication request processing.
Original NVD description (English source)
Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS