CVE-2026-37452

Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensitive information via the MSIAPService.exe component...

CVE-2026-37452

The MSI NBFoundation Service (specifically the MSIAPService.exe component) is vulnerable to a Local Privilege Escalation (LPE) via an insecure named pipe, \.\pipe\MSI_SERVICE_2. The service allows Authenticated Users to connect to the pipe using a predictable 3DES-ECB cipher. Once connected, an a...