CVE-2026-69853: Win32k Information Disclosure Vulnerability
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.
Other sources
Win32k Information Disclosure Vulnerability
— Microsoft
Affected Software
Remediation
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker must already be authorized on the affected Windows system and must exploit it locally. The provided data does not indicate that it is remotely exploitable or requires user interaction.
What is the likely impact if exploitation succeeds?
Successful exploitation can disclose information from the affected system. The supplied severity vector indicates high confidentiality impact, with no stated integrity or availability impact.
Which systems should be evaluated for exposure?
Evaluate Microsoft Windows 10, Windows 11, and Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025 systems. The data does not provide affected build numbers, update levels, or configuration-specific conditions.