Vigie VulnDBEuropean-hosted Vulnerability DB
EN
Menu

Microsoft Trace Data Helper Information Disclosure Vulnerability (Microsoft Windows 10 Version 1607)

CVE-2026-70260
MEDIUM 5.5

En bref

Source
NVD
EPSS
EPSS 0.93 % · centile 61 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
microsoft
Statut NVD
Undergoing Analysis

Rechercher sur…

Description

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.

Faiblesses (CWE)

  • CWE-497 — Exposition d'informations système sensibles à une sphère non autorisée

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:Cmicrosoft
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NNVD · secure@microsoft.com (Secondary)

Références européennes

Avis du CERT-FR

Produits affectés

ProduitVersions
Microsoft · Windows 10 Version 1607affected 10.0.14393.0 < 10.0.14393.9612
Microsoft · Windows 10 Version 1809affected 10.0.17763.0 < 10.0.17763.9376
Microsoft · Windows 10 Version 21H2affected 10.0.19044.0 < 10.0.19044.7807
Microsoft · Windows 10 Version 22H2affected 10.0.19045.0 < 10.0.19045.7807
Microsoft · Windows 11 version 23H2affected 10.0.22631.0 < 10.0.22631.7652
Microsoft · Windows 11 Version 23H2affected 10.0.22631.0 < 10.0.22631.7652
Microsoft · Windows 11 Version 24H2affected 10.0.26100.0 < 10.0.26100.9711
Microsoft · Windows 11 Version 25H2affected 10.0.26200.0 < 10.0.26200.9711
Microsoft · Windows 11 version 26H1affected 10.0.28000.0 < 10.0.28000.3231
Microsoft · Windows 11 Version 26H2affected 10.0.26300.0 < 10.0.26300.9711
Microsoft · Windows Server 2012affected 6.2.9200.0 < 6.2.9200.26434
Microsoft · Windows Server 2012 (Server Core installation)affected 6.2.9200.0 < 6.2.9200.26434
Microsoft · Windows Server 2012 R2affected 6.3.9600.0 < 6.3.9600.23470
Microsoft · Windows Server 2012 R2 (Server Core installation)affected 6.3.9600.0 < 6.3.9600.23470
Microsoft · Windows Server 2016affected 10.0.14393.0 < 10.0.14393.9612
Microsoft · Windows Server 2016 (Server Core installation)affected 10.0.14393.0 < 10.0.14393.9612
Microsoft · Windows Server 2019affected 10.0.17763.0 < 10.0.17763.9376
Microsoft · Windows Server 2019 (Server Core installation)affected 10.0.17763.0 < 10.0.17763.9376
Microsoft · Windows Server 2022affected 10.0.20348.0 < 10.0.20348.5761
Microsoft · Windows Server 2025affected 10.0.26100.0 < 10.0.26100.33650

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD