Summary
Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
What type of information could be disclosed by this vulnerability?
The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Kernel memory read - unintentional read access to memory contents in kernel space from a user mode process.
Security updates
10.0.17763.8389 — https://support.microsoft.com/help/5075904
10.0.20348.4773 — https://support.microsoft.com/help/5075906
10.0.20348.4711 — https://support.microsoft.com/help/5075943
10.0.19044.6937 — https://support.microsoft.com/help/5075912
10.0.26100.32370 — https://support.microsoft.com/help/5075899
10.0.26100.32313 — https://support.microsoft.com/help/5075942
10.0.22631.6649 — https://support.microsoft.com/help/5075941
10.0.25398.2149 — https://support.microsoft.com/help/5075897
10.0.26100.7840 — https://support.microsoft.com/help/5077181
10.0.26100.7781 — https://support.microsoft.com/help/5077212
10.0.14393.8868 — https://support.microsoft.com/help/5075999
6.3.9600.23022 — https://support.microsoft.com/help/5075970
Vulnerabilities 1
-
Medium 5.5
Windows Kernel Information Disclosure Vulnerability
Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.
Revision history
-
#1
Information published. This CVE was addressed by updates that were released in November 2025, but the CVE was inadvertently omitted from the November 2025 Security Updates. This is an informational change only. Customers who have already installed the November 2025 updates do not need to take any further action.
References
-
CVE-2026-21222 Windows Kernel Information Disclosure Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21222
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss