CVE-2026-85812: CWE-552: Files or Directories Accessible to External Parties in Microsoft Windows 10 Version 21H2

This vulnerability, identified as CWE-552, affects the Windows Bind Filter Driver in Windows 10 Version 21H2. It allows an authorized attacker with local access to disclose information by accessing files or directories that should not be externally accessible. The CVSS 3.1 base score is 5.5, reflecting a medium severity impact primarily on confidentiality. The vulnerability affects multiple specific builds of Windows 10 21H2 prior to their respective patch versions. Microsoft has published an official fix to address this issue.

The impact is limited to information disclosure by an authorized local attacker. There is no impact on integrity or availability. The attacker must have local privileges to exploit this vulnerability. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 21H2 builds as detailed in the Microsoft Security Response Center advisory. No additional mitigation actions are required beyond applying the official patch.