CVE-2026-69294

Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally.

Scoring

Severity

MEDIUM

CVSS base score

5.5

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

EPSS probability

0.35%

CWE

CWE-209

Published

2026-09-08

Last modified

2026-09-10

Affected products

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Microsoft Windows 10 Version 22H2
• Microsoft Windows 11 version 23H2
• Microsoft Windows 11 Version 23H2
• Microsoft Windows 11 Version 24H2
• Microsoft Windows 11 Version 25H2
• Microsoft Windows 11 version 26H1

Weakness type

• CWE-209

Related vulnerabilities

• CVE-2026-66306 — Skype for Business Information Disclosure Vulnerability
• CVE-2026-68886 — Windows Network Connection Broker Information Disclosure Vulnerability
• CVE-2026-67383 — Microsoft SQL Server Information Disclosure Vulnerability
• CVE-2026-69684 — Windows Error Reporting Information Disclosure Vulnerability
• CVE-2026-69552 — Windows Print Spooler Components Information Disclosure Vulnerability
• CVE-2026-11873 — Pki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosure
• CVE-2026-82739 — Ash.Resource.Validation.Confirm leaks a confirmed field's stored value in the atomic mismatch error
• CVE-2026-82733 — Route handler return value echoed into AshTypescript error response

Markdown version · Browse all CVEs