CVE-2026-88140
MediumCVSS 5.5Summary
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
Risk Assessment
An attacker with valid credentials can locally read memory data, potentially leading to leakage of sensitive information.
Recommendation
Apply the latest Windows security updates and restrict local access to authorized users.
Other vulnerabilities in Windows Key Storage Provider
See all- CVE-2026-69506Medium
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
- CVE-2021-38624Medium
A security feature bypass vulnerability in Windows Key Storage Provider allows an attacker to bypass key protection mechanisms. This could lead to unauthorized access to cryptographic keys and protected data.
Original NVD description (English source)
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS