Windows Kernel Information Disclosure Vulnerability
Low RiskCVSS 3.3CVE-2026-50419Jul 14, 2026
Microsoft
IT in OT - Windows Server and Active Directory are widely deployed in OT environments
Attack path
Attack VectorLocal
Auth RequiredLow
ComplexityLow
User InteractionNone needed
Summary
A vulnerability in the Windows Kernel allows an authorized local attacker to disclose sensitive information. The vulnerability requires local access and valid user credentials. Exploitation is considered unlikely.
What this means
What could happen
An authorized user on a workstation or server could retrieve sensitive kernel information that might aid in further attacks, though the actual operational impact is limited since local authentication is required.
Who's at risk
This affects Windows workstations (10, 11) and servers (2016, 2019, 2022, 2025) used in IT environments that support operational technology. Organizations with shared workstations or contractors with local access are at higher risk.
How it could be exploited
An attacker with valid local user credentials on a Windows system could execute code locally that accesses kernel memory regions, exposing sensitive data. This is not remotely exploitable.
Prerequisites
- Valid local user account credentials on the target Windows system
- Local code execution capability on the affected Windows machine
low complexityrequires local user credentials
Exploitability
Unlikely to be exploited — EPSS score 0.5%
Affected products (23)
23 with fix
ProductAffected VersionsFix Status
Remediation & Mitigation
0/1
Schedule — requires maintenance window
0/1Patching may require device reboot — plan for process interruption
HOTFIXApply the July 2026 Windows security update to all affected Windows 10 and Windows Server systems
CVEs (1)
↑↓ Navigate · Esc Close
API:
/api/v1/advisories/8c91037f-e6aa-4566-8dd0-6f6cb355b9a9Get OT security insights every Tuesday
Advisory breakdowns, a weekly summary, and incident analyses for the people actually defending OT environments. Free, no account required.