CVE-2026-59136: Microsoft COM for Windows Information Disclosure Vulnerability
Microsoft COM for Windows Information Disclosure Vulnerability
Other sources
Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9168Fixed in 10.0.26100.9106Patch KB5120994 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.7663Patch KB5120249 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.7517Patch KB5120240 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.9168Fixed in 10.0.26100.9106Patch KB5120994 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9168Fixed in 10.0.26000.9106Patch KB5120994 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.7663Patch KB5120249 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33296Fixed in 10.0.26100.33222Patch KB5120228 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.5499Fixed in 10.0.20348.5440Patch KB5120229 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.9115Patch KB5120238 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.23337Patch KB5120386 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.26279Patch KB5120385 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.9418Patch KB5120418 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.2704Patch KB5121000
Event History
Frequently Asked Questions
What is the severity of CVE-2026-59136?
CVE-2026-59136 has a medium severity rating of 5.5.
What does CVE-2026-59136 affect?
CVE-2026-59136 affects several versions of Microsoft Windows, including Windows 10, Windows 11, and various Windows Server editions.
What type of vulnerability is CVE-2026-59136?
CVE-2026-59136 is classified as an information disclosure vulnerability due to the use of uninitialized resources in Microsoft COM.
How can an attacker exploit CVE-2026-59136?
An authorized attacker can exploit CVE-2026-59136 to disclose information locally on affected systems.
What is the potential impact of CVE-2026-59136?
The potential impact of CVE-2026-59136 is that sensitive information may be disclosed to an attacker, compromising user privacy.