CVE-2026-69349: Windows Management Instrumentation Information Disclosure Vulnerability
Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network.
Other sources
Windows Management Instrumentation Information Disclosure Vulnerability
— Microsoft
Affected Software
Remediation
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker must already be authorized and able to access the affected system over a network. The issue is an information disclosure vulnerability; the provided data does not indicate that it enables modification or denial of service.
Which systems are listed as affected?
The affected software list includes Microsoft Windows 10, Windows 11, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, Windows Server 2019, Windows Server 2022, and Windows Server 2025.
Does exploitation require user interaction?
Yes. The supplied severity vector indicates that user interaction is required. It also indicates low attack complexity and low privileges required.