OTPulse

Windows Kernel-Mode Drivers Information Disclosure Vulnerability

MonitorCVSS 5.5CVE-2026-85857Oct 13, 2026
Microsoft
IT in OT - Windows Server and Active Directory are widely deployed in OT environments
Attack path
Attack VectorLocal
Auth RequiredLow
ComplexityLow
User InteractionNone needed
Summary

Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

What this means
What could happen
Could expose sensitive configuration or process data
Who's at risk
Organizations in critical infrastructure using Microsoft equipment
How it could be exploited
Attacker would need local or console access to the device with basic access credentials. The attack is straightforward with no special conditions
Exploitability
Unlikely to be exploited — EPSS score 0.5%
Affected products (28)
28 with fix
ProductAffected VersionsFix Status
Windows 11 Version 26H2 for ARM64-based SystemsAll versionsBuild 10.0.26300.9711
Windows 11 Version 26H2 for x64-based SystemsAll versionsBuild 10.0.26300.9711
Windows 10 Version 1809 for 32-bit SystemsAll versionsBuild 10.0.17763.9376
Windows 10 Version 1809 for x64-based SystemsAll versionsBuild 10.0.17763.9376
Windows Server 2019All versionsBuild 10.0.17763.9376
Remediation & Mitigation
0/1
Long-term hardening
0/1
Exploitation assessment: Exploitation Unlikely. Apply the 2026-Oct security update.
View full vendor advisory
API: /api/v1/advisories/1b2939b2-e975-469b-8ed4-d97d3387710c

Get OTPulse briefings by email

Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.