CVE-2026-69339

5.5 mediumEPSS 0.5%

Medium (5.5) in microsoft. EPSS 0.5% chance of exploitation in the next 30 days.

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWE: CWE-497
Published: 2026-09-08
Modified: 2026-09-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_11_24h2
microsoft:windows_11_25h2
microsoft:windows_11_26h1

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69339

Check your stack JSON