OTPulse

Windows Kernel Information Disclosure Vulnerability

Plan PatchCVSS 8.2CVE-2026-50429Jul 14, 2026
Microsoft
IT in OT - Windows Server and Active Directory are widely deployed in OT environments
Attack path
Attack VectorNetwork
Auth RequiredNone
ComplexityLow
User InteractionNone needed
Summary

An out-of-bounds read vulnerability in the Windows Kernel allows an unauthorized attacker to disclose sensitive information remotely over a network. The vulnerability affects Windows 10 (versions 1607, 1809, 21H2, 22H2), Windows 11 (versions 24H2, 25H2, 26H1), Windows Server 2016, 2019, 2022, and 2025 across all architectures (32-bit, x64, ARM64, and Server Core installations). Exploitation requires only network access and no authentication or user interaction. Microsoft has released patches for all affected versions.

What this means
What could happen
An attacker could read sensitive kernel memory without authentication, potentially exposing system secrets or configuration details that could be used in follow-up attacks. This impacts the confidentiality of your servers and workstations.
Who's at risk
Organizations running Windows 10 (versions 1607, 1809, 21H2, 22H2), Windows 11 (versions 24H2, 25H2, 26H1), Windows Server 2016, 2019, 2022, and 2025 are affected. This includes all engineering workstations, HMI systems, SCADA servers, historian computers, and any other Windows-based systems in your water/utility infrastructure.
How it could be exploited
An attacker with network access to an affected Windows system could send specially crafted packets to trigger an out-of-bounds read in the kernel, extracting sensitive memory contents remotely without needing credentials or user interaction.
Prerequisites
  • Network access to the affected Windows system
  • No authentication required
  • No user interaction required
remotely exploitableno authentication requiredlow complexityaffects confidentiality of system secretswide range of Windows versions affected
Exploitability
Some exploitation risk — EPSS score 1.1%
Affected products (23)
23 with fix
ProductAffected VersionsFix Status
Windows 10 Version 1809 for 32-bit SystemsAll versionsBuild 10.0.17763.9020
Windows 10 Version 1809 for x64-based SystemsAll versionsBuild 10.0.17763.9020
Windows Server 2019All versionsBuild 10.0.17763.9020
Windows Server 2019 (Server Core installation)All versionsBuild 10.0.17763.9020
Windows Server 2022All versionsBuild 10.0.20348.5386
Remediation & Mitigation
0/4
Do now
0/1
WORKAROUNDRestrict network access to Windows systems from untrusted networks using firewall rules
Schedule — requires maintenance window
0/2

Patching may require device reboot — plan for process interruption

Windows Server 2019
HOTFIXPrioritize patching Windows Server 2019, Windows Server 2022, and Windows Server 2025 systems in your environment
All products
HOTFIXApply the 2026-July security update to all affected Windows 10, Windows 11, and Windows Server systems
Long-term hardening
0/1
HARDENINGSegment OT/ICS networks from IT networks to limit exposure of engineering workstations and HMIs running Windows
View full vendor advisory
API: /api/v1/advisories/f231d0a8-80c0-4fc4-8c84-47d9b8ba3747

Get OT security insights every Tuesday

Advisory breakdowns, a weekly summary, and incident analyses for the people actually defending OT environments. Free, no account required.

Windows Kernel Information Disclosure Vulnerability | CVSS 8.2 - OTPulse