CVE Watch10 de nov. de 2026

CVE-2026-112757

Exposure of sensitive information to an unauthorized actor in Windows Secure Kernel Mode allows an authorized attacker to disclose informati

CVSS

6.0

Média

EPSS

—

KEV

—

Exploit Today

0-100

Publicado: 10 de nov. de 2026 · Última mod.: 10 de nov. de 2026 · CWE-497

EPSS · 30d

Ainda não há histórico EPSS suficiente.

Descrição técnica

Exposure of sensitive information to an unauthorized actor in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.

Referências oficiais

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112757

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-961375.5 MÉD

—

——0Exposure of sensitive system information to an unauthorized control sphere in Windows Graphics Kernel allows an authorized attacker to disclose information locally.5h CVE-2026-960015.5 MÉD

—

——0Exposure of sensitive system information to an unauthorized control sphere in Windows Bluetooth Service allows an authorized attacker to disclose information locally.5h CVE-2026-1199424.7 MÉD

—

——0Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.12h CVE-2026-1198825.3 MÉD

—

——0Exposure of sensitive system information to an unauthorized control sphere in Windows Remote Desktop Services allows an authorized attacker to disclose information over a network.11h CVE-2026-1198565.5 MÉD

—

——0Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally.11h CVE-2026-1198227.0 ALT

—

——0Exposure of sensitive system information to an unauthorized control sphere in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.11h