CVE-2026-83909
Medium · 4.7CVSS
4.7
EPSS
0.4%
Published
Oct 13, 2026
CISA due date
—
The record
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-109823 An attacker can read the name of filesystem paths of your application present via… CWE-497
- CVE-2026-111079 A flaw was found in Goose. CWE-497
- CVE-2026-111946 Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode… CWE-497
- CVE-2026-96865 Exposure of sensitive system information to an unauthorized control sphere in Windows… CWE-497
- CVE-2026-85866 Exposure of sensitive system information to an unauthorized control sphere in Windows… CWE-497
- CVE-2026-83907 Exposure of sensitive system information to an unauthorized control sphere in Windows… CWE-497
- CVE-2026-83905 Exposure of sensitive system information to an unauthorized control sphere in Windows… CWE-497
- CVE-2026-83835 Buffer over-read in Windows Common Log File System Driver allows an authorized attacker… CWE-497