Product:
Windows File Explorer
Summary
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. This vulnerability can lead to significant confidentiality breaches. It is crucial for users to be aware of the risks associated with this issue.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-20939 |
Exploitation
An attacker with local access can exploit this vulnerability by leveraging the information exposure to gain unauthorized access to sensitive data. The low attack complexity means that even users with minimal privileges can potentially exploit this flaw if they have physical access to the affected system.
Affected Products
- Windows File Explorer: Vulnerable to unauthorized information disclosure.
Mitigation
To mitigate this vulnerability, users should ensure that their systems are updated with the latest security patches from Microsoft. Additionally, restricting physical access to systems can help prevent unauthorized exploitation of this vulnerability.