Product:
Windows Remote Procedure Call
Summary
The vulnerability allows an authorized attacker to disclose sensitive information locally. This exposure can lead to unauthorized access to confidential data. The issue arises from improper handling of information within the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-32085 |
Exploitation
To exploit this vulnerability, an attacker with local access must leverage the Windows Remote Procedure Call to gain unauthorized access to sensitive information. The attack requires low privileges and does not necessitate user interaction, making it relatively straightforward for an attacker with local access to execute.
Affected Products
- Windows Remote Procedure Call: Vulnerable to information disclosure due to improper handling of sensitive data.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Regularly updating systems and monitoring for unauthorized access can help reduce the risk of exploitation.