Win32k Information Disclosure Vulnerability
MonitorCVSS 5.5CVE-2026-70293Oct 13, 2026
Microsoft
IT in OT - Windows Server and Active Directory are widely deployed in OT environments
Attack path
Attack VectorLocal
Auth RequiredLow
ComplexityLow
User InteractionNone needed
Summary
A vulnerability in the Windows Win32 Kernel Subsystem uses uninitialized memory resources, allowing a local authorized user to read sensitive information that should not be accessible to them. The vulnerability affects Windows 10 (versions 1607, 1809, 21H2, 22H2), Windows 11 (versions 23H2, 24H2, 25H2, 26H1, 26H2), Windows Server 2016, 2019, 2022, and 2025. Microsoft has released fixes in the October 2026 security update.
What this means
What could happen
A user with local access to a Windows system could read sensitive information from kernel memory that should not be accessible, potentially exposing system secrets or data from other processes.
Who's at risk
Organizations running Windows 10, Windows 11, or Windows Server 2016/2019/2022/2025 on employee workstations, servers, or engineering workstations used to manage industrial systems. This affects IT infrastructure that may support OT environments, including SCADA workstations, historian servers, and engineering stations.
How it could be exploited
An attacker with a user account on the Windows system could craft a request to the Win32 kernel subsystem that accesses uninitialized memory regions, allowing them to read information not intended for their access level.
Prerequisites
- Local user account on the Windows system
- Ability to execute code or make system calls on the local machine
Low complexity exploitationLocal access only (limited risk in isolated networks)Information disclosure only (no direct control impact)
Exploitability
Unlikely to be exploited — EPSS score 0.4%
Affected products (28)
28 with fix
ProductAffected VersionsFix Status
Remediation & Mitigation
0/7
Schedule — requires maintenance window
0/7Patching may require device reboot — plan for process interruption
Windows Server 2019
HOTFIXUpdate Windows Server 2019 to Build 10.0.17763.9376 or later
Windows Server 2022
HOTFIXUpdate Windows Server 2022 to Build 10.0.20348.5761 or later
All products
HOTFIXUpdate Windows 10 Version 1809 32-bit systems to Build 10.0.17763.9376 or later
HOTFIXUpdate Windows 10 Version 1809 x64 systems to Build 10.0.17763.9376 or later
HOTFIXUpdate Windows 10 Version 21H2 to Build 10.0.19044.7807 or later
HOTFIXUpdate Windows 10 Version 22H2 to Build 10.0.19045.7807 or later
HOTFIXUpdate Windows 11 (all versions) to the latest October 2026 security update for your specific version
CVEs (1)
↑↓ Navigate · Esc Close
API:
/api/v1/advisories/69565453-3ca7-4515-a7b5-3cd8bc844a91Get OTPulse briefings by email
Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.