CVE-2026-68852

Published: Sep 8, 2026Modified: Sep 8, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: secure@microsoft.com (Secondary)

Description

Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally.

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Use of Uninitialized Resource

The product uses or accesses a resource that has not been initialized.

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68852

Source: secure@microsoft.com

Timeline

No history available yet.