Product:
Tablet Windows User Interface
Summary
The Tablet Windows User Interface Subsystem has a vulnerability that allows an authorized attacker to disclose sensitive information locally. This exposure can lead to unauthorized access to confidential data. The issue arises from improper handling of sensitive information within the subsystem.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-20827 |
Exploitation
To exploit this vulnerability, an attacker with local access can leverage the weaknesses in the Tablet Windows User Interface Subsystem to gain unauthorized access to sensitive information. The attack requires low privileges and does not necessitate user interaction, making it relatively straightforward for an attacker with physical access to the device.
Affected Products
- Tablet Windows User Interface: Vulnerable to unauthorized information disclosure due to improper handling of sensitive data.
Mitigation
To mitigate this vulnerability, users should ensure that their systems are updated with the latest security patches from Microsoft. Regularly monitoring for updates and applying them promptly can help protect against potential exploitation of this issue.