CVE-2026-85793

MediumCVSS 5.5

Published: 13/10/2026(UTC)Updated: 16/10/2026(UTC)Translated: 14/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.47%

39th percentile - higher than 39% of all known CVEs

Summary

Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclose information locally.

Risk Assessment

An attacker with local access could obtain sensitive system information, potentially facilitating further attacks and compromising security.

Recommendation

Apply Microsoft security updates for the Sysmain Service and restrict local system access.

Other vulnerabilities in Windows Sysmain Service

CVE-2026-96306High
Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.

Original NVD description (English source)

Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclose information locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS