CVE-2026-69895: Windows Spaceport.sys Information Disclosure Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
Other sources
Windows Spaceport.sys Information Disclosure Vulnerability
— Microsoft
Affected Software
Remediation
Event History
Frequently Asked Questions
What level of access does an attacker need?
An attacker must already be authorized on the affected Windows system and exploit the issue locally. The provided data does not indicate that remote exploitation or user interaction is required.
What is the likely security impact?
Successful exploitation can disclose information because the flaw is an out-of-bounds read in Spaceport.sys. The provided severity vector indicates confidentiality impact only; it does not indicate integrity or availability impact.
Which systems should be reviewed?
Review Microsoft Windows 10, Windows 11, and Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025 systems. The supplied data does not identify affected build numbers, update levels, or configuration prerequisites.