Vulnerability

CVE-2026-78516

Descriptive record received from OpenCTI and minimised for consultation in the Intel portal.

Sharing: PUBLIC-OSINT
Confidence: 100
Source: The CVE Program
Updated: 26/09/2026 04:33

Description

Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.

STIX identifiervulnerability--f98bc021-9f25-5b56-8aec-f4ce4bfc5836

First observation-

Last observation-

Known relationships25

Aliases and classifications

Buffer Over-readCWE-126

Minimised technical details

No raw data

cisa kev: False
cvss score: 4.3
cvss vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
cvss severity: MEDIUM

Provenance

Public references

Windows Storage Information Disclosure Vulnerability
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78516

EudorIA correlation

Intel catalogue

The vulnerability is also available in the EudorIA editorial catalogue.

Open EudorIA analysis

Presence in OpenCTI describes an intelligence correlation and does not, by itself, constitute evidence of compromise, legal attribution or operational guidance applicable without context verification.