Product:
Windows File Explorer
Summary
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. This vulnerability can lead to significant confidentiality breaches. Attackers with low privileges can exploit this issue without requiring user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-32084 |
Exploitation
To exploit this vulnerability, an attacker with local access can leverage the exposure of sensitive information within Windows File Explorer. By navigating through the file system, the attacker can access and disclose sensitive data that should be protected, potentially leading to unauthorized information disclosure.
Affected Products
- Windows File Explorer: The primary product affected, allowing unauthorized information disclosure.
Mitigation
To mitigate this vulnerability, users should ensure that their systems are updated with the latest security patches from Microsoft. Additionally, restricting local access to sensitive information and monitoring file access can help reduce the risk of exploitation.