CVE-2026-70260
MediumCVSS 5.5Summary
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
Risk Assessment
An attacker with valid credentials could access sensitive system data, potentially facilitating further attacks in the environment.
Recommendation
Apply security updates for Microsoft Trace Data Helper and restrict local access to trusted users.
Other vulnerabilities in Microsoft Trace Data Helper
See all- CVE-2026-70261Medium
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
- CVE-2026-56198High
Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS