Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

CVE-2026-57097

🗓️ 14 Jul 2026 17:05:16Reported by microsoftType 
cve
 cve🔗 web.nvd.nist.gov👁 16 Views

Untrusted search path in Extensible markup language lets an attacker bypass security via a physical attack.

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
attackerkb
ATTACKERKB		CVE-2026-57097
14 Jul 202617:05
–attackerkb
circl
Circl		CVE-2026-57097
14 Jul 202619:01
–circl
cvelist
Cvelist		CVE-2026-57097 Microsoft XML Security Feature Bypass Vulnerability
14 Jul 202617:05
–cvelist
euvd
EUVD		EUVD-2026-43758
14 Jul 202618:32
–euvd
mscve
Microsoft CVE		Microsoft XML Security Feature Bypass Vulnerability
14 Jul 202614:00
–mscve
ncsc
NCSC		Vulnerabilities in Microsoft Windows
14 Jul 202618:13
–ncsc
nvd
NVD		CVE-2026-57097
14 Jul 202617:17
–nvd
ptsecurity
Positive Technologies		PT-2026-58265
14 Jul 202600:00
–ptsecurity
nessus
Tenable Nessus		KB5099444: Windows Server 2012 R2 Security Update (July 2026)
14 Jul 202600:00
–nessus
nessus
Tenable Nessus		KB5099445: Windows Server 2012 Security Update (July 2026)
14 Jul 202600:00
–nessus
Rows per page
NVD
Vulners
CNA
Node
OR
microsoftwindows_10_1607Range<10.0.14393.9339x64
microsoftwindows_10_1607Range<10.0.14393.9339x86
microsoftwindows_10_1809Range<10.0.17763.9020x64
microsoftwindows_10_1809Range<10.0.17763.9020x86
microsoftwindows_10_21h2Range<10.0.19044.7548arm64
microsoftwindows_10_21h2Range<10.0.19044.7548x64
microsoftwindows_10_21h2Range<10.0.19044.7548x86
microsoftwindows_10_22h2Range<10.0.19045.7548arm64
microsoftwindows_10_22h2Range<10.0.19045.7548x64
microsoftwindows_10_22h2Range<10.0.19045.7548x86
microsoftwindows_11_24h2Range<10.0.26100.8875arm64
microsoftwindows_11_24h2Range<10.0.26100.8875x64
microsoftwindows_11_25h2Range<10.0.26200.8875arm64
microsoftwindows_11_25h2Range<10.0.26200.8875x64
microsoftwindows_11_26h1Range<10.0.28000.2525arm64
microsoftwindows_11_26h1Range<10.0.28000.2525x64
microsoftwindows_server_2012Match-
microsoftwindows_server_2012Matchr2
microsoftwindows_server_2016Range<10.0.14393.9339
microsoftwindows_server_2019Range<10.0.17763.9020
microsoftwindows_server_2022Range<10.0.20348.5386
microsoftwindows_server_2025Range<10.0.26100.33158
[
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1607",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.9339",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1809",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9020",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 21H2",
    "platforms": [
      "32-bit Systems",
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.19044.0",
        "lessThan": "10.0.19044.7548",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 22H2",
    "platforms": [
      "32-bit Systems",
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.19045.0",
        "lessThan": "10.0.19045.7548",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 Version 24H2",
    "platforms": [
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.8875",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 Version 25H2",
    "platforms": [
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26200.0",
        "lessThan": "10.0.26200.8875",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 version 26H1",
    "platforms": [
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.28000.0",
        "lessThan": "10.0.28000.2525",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.9200.0",
        "lessThan": "6.2.9200.26226",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.9200.0",
        "lessThan": "6.2.9200.26226",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.9600.0",
        "lessThan": "6.3.9600.23291",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.9600.0",
        "lessThan": "6.3.9600.23291",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.9339",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.9339",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9020",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.9020",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2022",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.20348.0",
        "lessThan": "10.0.20348.5386",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.33158",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.33158",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
03 Aug 2026 22:53Current
6.1Medium risk
Vulners AI Score6.1
CVSS 3.16.4 - 6.8
EPSS0.00322
SSVC
CWE-426
Untrusted search pathExtensible markup languageSecurity feature bypassPhysical attack
16