Product:
Windows File Explorer
Summary
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. This vulnerability can lead to significant confidentiality breaches. Attackers with low privileges can exploit this issue without requiring user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-20937 |
Exploitation
To exploit this vulnerability, an attacker with local access can leverage the weakness in Windows File Explorer to access sensitive information that should be protected. By executing specific actions, the attacker can disclose confidential data to unauthorized users, making it crucial for organizations to address this issue promptly.
Affected Products
- Windows File Explorer: Vulnerable to unauthorized information disclosure due to improper handling of sensitive data.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Organizations should also review their access controls and ensure that sensitive information is adequately protected against unauthorized access.