SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-68842

MEDIUM · CVSS 5.5 EPSS 0.36%

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The Windows MIDI Service Module is vulnerable to unauthorized information disclosure, allowing an attacker with local access to extract sensitive system information. This could lead to further exploitation or compromise of the system's integrity. Organizations utilizing Windows systems should prioritize addressing this vulnerability to mitigate potential risks associated with local attacks.

CVE
CVE-2026-68842
Severity
MEDIUM
CVSS
5.5
EPSS
0.36%
Windows

Original NVD Description

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.

Related CVEs

Other vulnerabilities affecting the same vendor(s)