CVE-2026-96921

Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally. The flaw involves incorrect interpretation of object types during data processing.

An authenticated user could locally access data they should not be authorized to see, potentially leading to information disclosure.

Apply security updates for Windows Message Queuing and consider restricting access to the message queuing service.