Product:
Windows File Explorer
Summary
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. This vulnerability can lead to significant confidentiality breaches. Attackers with local access can exploit this issue to gain unauthorized access to sensitive data.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-32081 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system. By leveraging this access, the attacker can manipulate the Windows File Explorer to disclose sensitive information that should otherwise be protected. The low complexity of the attack means that it can be executed without requiring advanced skills or tools.
Affected Products
- Windows File Explorer: Vulnerable to unauthorized information disclosure when accessed by an attacker with local privileges.
Mitigation
To mitigate this vulnerability, users should ensure that their systems are updated with the latest security patches from Microsoft. Additionally, restricting local access to sensitive systems can help prevent unauthorized exploitation of this vulnerability.