CVE-2026-96849: Windows Kernel-Mode Drivers Information Disclosure Vulnerability
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
Other sources
Windows Kernel-Mode Drivers Information Disclosure Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.3231Patch KB5127646
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker must already be authorized on the affected Windows 11 system and must be able to execute an attack locally. It is not described as remotely exploitable or requiring user interaction.
What is the likely impact if exploitation succeeds?
Successful exploitation can disclose information, with confidentiality rated high. The provided data does not indicate an integrity or availability impact.
How can I determine whether a system is in scope?
The listed affected software is Microsoft Windows 11. The supplied information does not include affected build numbers, update identifiers, or detection indicators.