CVE-2026-112977

Опубликовано: 10 нояб. 2026

Источник: msrc

CVSS3: 5.5

EPSS Низкий

Описание

Windows Deployment Services Information Disclosure Vulnerability

Improper privilege management in Windows Deployment Services allows an authorized attacker to disclose information locally.

What type of information could be disclosed by this vulnerability?

The type of information that could be disclosed if an attacker successfully exploited this vulnerability is file content.

Продукт	Статья	Обновление
Windows Server 2016	5131291	Security Update
Windows Server 2016 (Server Core installation)	5131291	Security Update
Windows Server 2019	5131085	Security Update
Windows Server 2019 (Server Core installation)	5131085	Security Update
Windows Server 2022	5131090	Security Update
Windows Server 2022 (Server Core installation)	5131090	Security Update
Windows Server 2025	5131080 5131077	Security Update-
Windows Server 2025 (Server Core installation)	5131080 5131077	Security Update-

Показывать по

Publicly Disclosed

Exploited

Latest Software Release

Exploitation Less Likely

EPSS

Процентиль: 35%

0.00406

Низкий

5.5 Medium

CVSS3

CVE-2026-112977

CVSS3: 5.5

nvd

3 дня назад

Improper privilege management in Windows Deployment Services allows an authorized attacker to disclose information locally.

GHSA-r77q-9xhq-qhv8

CVSS3: 5.5

github

3 дня назад

Improper privilege management in Windows Deployment Services allows an authorized attacker to disclose information locally.

EPSS

Процентиль: 35%

0.00406

Низкий

5.5 Medium

CVSS3