Product:
Windows NDIS
Summary
Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack. This vulnerability can lead to unauthorized access to sensitive information. It is classified as having a medium severity level due to its potential impact on confidentiality.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2026-20936 |
Exploitation
To exploit this vulnerability, an attacker must have physical access to the affected system. By leveraging this access, the attacker can perform an out-of-bounds read operation, which may allow them to retrieve sensitive information stored in memory. This requires low privileges and does not necessitate user interaction.
Affected Products
- Windows NDIS: Vulnerable to out-of-bounds read, allowing information disclosure with physical access.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Additionally, restricting physical access to systems can help prevent potential exploitation. Regular security audits and monitoring can also enhance overall security posture.