CVE-2026-96865
MediumCVSS 5.6Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally. The flaw involves improper data separation in kernel mode.
Risk Assessment
An authenticated user could locally access sensitive system information, potentially weakening kernel security mechanisms.
Recommendation
Apply security updates for Windows Secure Kernel Mode as soon as possible and enforce the principle of least privilege.
Other vulnerabilities in Windows Secure Kernel Mode
See all- CVE-2026-70026High
Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-70017Medium
Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
- CVE-2026-85921High
A double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-83939High
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-69846High
Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-69501High
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-50392High
A Use-After-Free vulnerability in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-42982High
Vulnerability in Windows Secure Kernel Mode due to improper validation of input consistency. An authenticated attacker can elevate privileges locally.
- CVE-2021-33744Medium
A vulnerability in Windows Secure Kernel Mode allows a security feature bypass. An attacker could exploit this flaw to bypass kernel protection mechanisms.
Original NVD description (English source)
Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS