Skip to content
OpenAdvisories
High MSRC-CVE-2026-59130 1 CVE

AMD Zen Information Disclosure Vulnerability

Published Aug 11, 2026 · Updated Aug 25, 2026 · Revision 2

Summary

Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What type of information could be disclosed by this vulnerability
If the attacker has both the ability to modify the encrypted secret where it is stored and to observe the precise timing for the secret being decrypted by the application, the attacker could infer the original secret across many decryption attempts.

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability
To exploit this vulnerability, an attacker would need to target an application by persisting encrypted secrets that are using specific old cryptography and Windows APIs.

Security updates
10.0.17763.9121 — https://support.microsoft.com/help/5120238
10.0.20348.5499 — https://support.microsoft.com/help/5120242
10.0.20348.5440 — https://support.microsoft.com/help/5120229
10.0.19044.7663 — https://support.microsoft.com/help/5120249
10.0.26100.33296 — https://support.microsoft.com/help/5120233
10.0.26100.33222 — https://support.microsoft.com/help/5120228
10.0.26200.9168 — https://support.microsoft.com/help/5121003
10.0.26200.9106 — https://support.microsoft.com/help/5120994
10.0.22631.7517 — https://support.microsoft.com/help/5120240
10.0.28000.2704 — https://support.microsoft.com/help/5121000
10.0.14393.9418 — https://support.microsoft.com/help/5120418
6.3.9600.23338 — https://support.microsoft.com/help/5120385

Vulnerabilities 1

Revision history

  1. #2

    Updated CWE value. This is an informational change only.

  2. #1

    Information published.

References