5.5
CVE-2026-72945
- EPSS 0.4%
- Veröffentlicht 08.09.2026 17:12:38
- Zuletzt bearbeitet 21.09.2026 19:32:16
- Erkennungen
Windows Task Scheduler Information Disclosure Vulnerability
Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Windows 10 1607 HwPlatform x64 Version < 10.0.14393.9512
Microsoft ≫ Windows 10 1607 HwPlatform x86 Version < 10.0.14393.9512
Microsoft ≫ Windows 10 1809 HwPlatform x64 Version < 10.0.17763.9245
Microsoft ≫ Windows 10 1809 HwPlatform x86 Version < 10.0.17763.9245
Microsoft ≫ Windows 10 21h2 HwPlatform arm64 Version < 10.0.19044.7725
Microsoft ≫ Windows 10 21h2 HwPlatform x64 Version < 10.0.19044.7725
Microsoft ≫ Windows 10 21h2 HwPlatform x86 Version < 10.0.19044.7725
Microsoft ≫ Windows 10 22h2 HwPlatform arm64 Version < 10.0.19045.7725
Microsoft ≫ Windows 10 22h2 HwPlatform x64 Version < 10.0.19045.7725
Microsoft ≫ Windows 10 22h2 HwPlatform x86 Version < 10.0.19045.7725
Microsoft ≫ Windows 11 23h2 HwPlatform arm64 Version < 10.0.22631.7582
Microsoft ≫ Windows 11 23h2 HwPlatform x64 Version < 10.0.22631.7582
Microsoft ≫ Windows Server 2016 HwPlatform x64 Version < 10.0.14393.9512
Microsoft ≫ Windows Server 2019 HwPlatform x64 Version < 10.0.17763.9245
Microsoft ≫ Windows Server 2022 HwPlatform x64 Version < 10.0.20348.5622
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.4% | 0.331 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| Microsoft | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
CWE-908 Use of Uninitialized Resource
The product uses or accesses a resource that has not been initialized.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72945