CVE-2026-20937 Windows File Explorer Information Disclosure Vulnerability

...

CVE-2026-20939

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...

CVE-2026-20939 Windows File Explorer Information Disclosure Vulnerability

...

CVE-2026-20937 Windows File Explorer Information Disclosure Vulnerability

...

CVE-2026-20937

CVE-2026-20937 affects Windows File Explorer and is described as an information-disclosure vulnerability allowing a locally authorized attacker to disclose information. The provided documents confirm a Windows File Explorer exposure, with CVSS 3.1/5.5 (Local access, Low attack complexity, High co...

CVE-2026-20939

CVE-2026-20939: Windows File Explorer information disclosure allowing a locally authenticated user to view sensitive data. The issue has a CVSSv3.1 base score of 5.5 (Local, Low attack complexity, Low privileges, Confidentiality impact: High). Microsoft has released fixes in January 2026 security...

CVE-2026-20939 Windows File Explorer Information Disclosure Vulnerability

...

CVE-2026-20937

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...

CVE-2026-20932

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...

CVE-2026-20932

CVE-2026-20932 is a Windows File Explorer information disclosure vulnerability with local access as the attack vector and a CVSS v3.1 base score of 5.5 (Medium). The connected advisories indicate the issue exists in Windows File Explorer and that Microsoft released January 2026 security updates; ...

CVE-2026-20932 Windows File Explorer Information Disclosure Vulnerability

...

CVE-2026-20932 Windows File Explorer Information Disclosure Vulnerability

...

CVE-2026-20847 Microsoft Windows File Explorer Spoofing Vulnerability

...

CVE-2026-20847 Microsoft Windows File Explorer Spoofing Vulnerability

...

CVE-2026-20847

CVE-2026-20847 is described in connected sources as a Windows Shell vulnerability that allows spoofing of a user over a network. The NVD entry lists a MEDIUM severity (CVSS 3.1: 6.5) with network attack vector, low complexity, and requires low privileges; impact shown as high confidentiality loss...

CVE-2026-20823 Windows File Explorer Information Disclosure Vulnerability

...

CVE-2026-20823 Windows File Explorer Information Disclosure Vulnerability

...

CVE-2026-20823

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...

CVE-2026-20823

CVE-2026-20823 is a Windows File Explorer information disclosure vulnerability that could allow a local attacker to view sensitive data. The CVE is mapped to Windows components handling File Explorer data exposure; its impact is confined to local access with low complexity and low privileges requ...

CVE-2026-20808

CVE-2026-20808 is a Windows local privilege escalation vulnerability in the Printer Association Object caused by concurrent execution on a shared resource without proper synchronization. An authenticated, locally privileged user can exploit this race condition to elevate privileges. Affected soft...