Medium · published January 13, 2026
CVSS calls it medium at 5.5. It is confirmed in active exploitation. It sits in the 94.5th percentile for exploit probability.
⚠️ An authorized attacker can exploit this flaw to snoop on sensitive information right from Desktop Windows Manager! Think of it like a hotel room with a sliding door that lets someone peek in—once they're inside, they can see everything without triggering any alarms. This vulnerability opens a small window for unauthorized users to access private data without even needing a key! This could lead to an unauthorized disclosure of sensitive information, allowing attackers to gather confidential data that could compromise user privacy and security. It's not catastrophic, but definitely something to take seriously, as it can provide a foothold for further attacks.
Think of it like a hotel room with a sliding door that lets someone peek in—once they're inside, they can see everything without triggering any alarms. This vulnerability opens a small window for unauthorized users to access private data without even needing a key! The vulnerability in Desktop Windows Manager allows authorized attackers to expose sensitive data by improperly managing access controls, enabling them to read information they shouldn't be able to access locally.
This could lead to an unauthorized disclosure of sensitive information, allowing attackers to gather confidential data that could compromise user privacy and security. It's not catastrophic, but definitely something to take seriously, as it can provide a foothold for further attacks. Ensure that your systems are updated with the latest security patches to protect against this vulnerability. Regularly audit user permissions and access controls to minimize the risk of insider attacks. It's also wise to monitor system logs for any suspicious activity. You've got this! By taking these steps, you'll be reinforcing your defenses and keeping sensitive information safe! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1607 | < 10.0.14393.8783 | 10.0.14393.8783 |
| microsoft/windows_10_1607 | < 10.0.14393.8783 | 10.0.14393.8783 |
| microsoft/windows_10_1809 | < 10.0.17763.8276 | 10.0.17763.8276 |
| microsoft/windows_10_1809 | < 10.0.17763.8276 | 10.0.17763.8276 |
| microsoft/windows_10_21h2 | < 10.0.19044.6809 | 10.0.19044.6809 |
| microsoft/windows_10_22h2 | < 10.0.19045.6809 | 10.0.19045.6809 |
| microsoft/windows_11_23h2 | < 10.0.22631.6491 | 10.0.22631.6491 |
| microsoft/windows_11_24h2 | < 10.0.26100.7623 | 10.0.26100.7623 |
| microsoft/windows_11_25h2 | < 10.0.26200.7623 | 10.0.26200.7623 |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2016 | < 10.0.14393.8783 | 10.0.14393.8783 |
| microsoft/windows_server_2019 | < 10.0.17763.8276 | 10.0.17763.8276 |
| microsoft/windows_server_2022 | < 10.0.20348.4648 | 10.0.20348.4648 |
| microsoft/windows_server_2022_23h2 | < 10.0.25398.2092 | 10.0.25398.2092 |
| microsoft/windows_server_2025 | < 10.0.26100.7623 | 10.0.26100.7623 |