CVE-2026-62906: Microsoft Discovery Studio Information Disclosure Vulnerability
Published Sep 3, 2026
·Updated
Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network.
Other sources
Microsoft Discovery Studio Information Disclosure Vulnerability
— Microsoft
Affected Software
1 affected component
Microsoft Discovery Studio
Event History
Sep 3, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·10:59 PM
Data Sourced
via MITRE·10:59 PM
DescriptionSeverity
Frequently Asked Questions
1
What does an attacker need to exploit this vulnerability?
The attacker can target the issue over a network and does not need prior privileges. Exploitation requires user interaction.
2
What is the potential impact if exploitation succeeds?
Successful exploitation may allow disclosure of information. The provided severity vector indicates high confidentiality impact, with no integrity or availability impact stated.