OTPulse

Windows Kernel Information Disclosure Vulnerability

MonitorCVSS 6.2CVE-2026-50294Jul 14, 2026
Microsoft
IT in OT - Windows Server and Active Directory are widely deployed in OT environments
Attack path
Attack VectorLocal
Auth RequiredNone
ComplexityLow
User InteractionNone needed
Summary

Windows Kernel Information Disclosure Vulnerability (CVE-2026-50294). An information disclosure flaw in the Windows Kernel allows unauthorized reading of sensitive kernel memory. Affects Windows 10 (versions 1607, 1809, 21H2, 22H2), Windows 11 (versions 24H2, 25H2, 26H1), Windows Server 2016, 2019, 2022, and 2025 across 32-bit, x64, and ARM64 architectures. Requires local code execution; CVSS 6.2.

What this means
What could happen
An attacker with local access to a Windows system could read sensitive kernel memory information that is normally restricted, potentially exposing system internals or security-related data useful for further attacks.
Who's at risk
Windows systems used as engineering workstations, HMI hosts, data servers, or administrative terminals in water utilities and electric utilities. This includes Windows 10, Windows 11, Windows Server 2016, 2019, 2022, and 2025 across all architectures. Any system where workstation staff access the network is potentially at risk if an attacker gains local execution capability.
How it could be exploited
An attacker must already have local access to the Windows system (or ability to run code locally). They could then read kernel memory through the Windows Kernel to extract sensitive information not normally accessible to unprivileged users.
Prerequisites
  • Local access to the system or ability to run code locally
  • No special privileges or credentials required beyond local execution capability
Low complexity exploitationNo authentication required for exploitationAffects IT infrastructure that supports OT operations
Exploitability
Unlikely to be exploited — EPSS score 0.5%
Affected products (23)
23 with fix
ProductAffected VersionsFix Status
Windows 10 Version 1809 for 32-bit SystemsAll versionsBuild 10.0.17763.9020
Windows 10 Version 1809 for x64-based SystemsAll versionsBuild 10.0.17763.9020
Windows Server 2019All versionsBuild 10.0.17763.9020
Windows Server 2019 (Server Core installation)All versionsBuild 10.0.17763.9020
Windows Server 2022All versionsBuild 10.0.20348.5386
Remediation & Mitigation
0/8
Schedule — requires maintenance window
0/8

Patching may require device reboot — plan for process interruption

Windows Server 2019
HOTFIXUpdate Windows Server 2019 to Build 10.0.17763.9020 or later
Windows Server 2022
HOTFIXUpdate Windows Server 2022 to Build 10.0.20348.5386 or later
All products
HOTFIXUpdate Windows 10 Version 1809 (32-bit) to Build 10.0.17763.9020 or later
HOTFIXUpdate Windows 10 Version 1809 (x64) to Build 10.0.17763.9020 or later
HOTFIXUpdate Windows 10 Version 21H2 to Build 10.0.19044.7548 or later
HOTFIXUpdate Windows 10 Version 22H2 to Build 10.0.19045.7548 or later
HOTFIXUpdate Windows 11 Version 24H2 to Build 10.0.26100.8875 or later
HOTFIXUpdate Windows 11 Version 25H2 to Build 10.0.26200.8875 or later
View full vendor advisory
API: /api/v1/advisories/807d2106-12df-461a-93b5-b810c4c66865

Get OT security insights every Tuesday

Advisory breakdowns, a weekly summary, and incident analyses for the people actually defending OT environments. Free, no account required.

Windows Kernel Information Disclosure Vulnerability | CVSS 6.2 - OTPulse