Product:
Windows Kernel
Summary
Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally. This vulnerability can lead to unauthorized access to sensitive data stored in log files. Attackers with low privileges can exploit this issue without requiring user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-21222 |
Exploitation
To exploit this vulnerability, an attacker with local access to the system can manipulate the log files to insert sensitive information. By gaining access to these logs, the attacker can disclose confidential information that should not be accessible. The low attack complexity means that even users with minimal privileges can potentially exploit this issue.
Affected Products
- Windows Kernel: Vulnerable to information disclosure due to sensitive data being logged improperly.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Regularly review and restrict access to log files to ensure that sensitive information is not exposed. Implementing proper logging practices can also help minimize the risk of information disclosure.