CVE-2026-85857: CWE-532: Insertion of Sensitive Information into Log File in Microsoft Windows 10 Version 1607

This vulnerability involves the insertion of sensitive information into log files by Windows Kernel-Mode Drivers in affected versions of Microsoft Windows 10, including Version 1607 and other specified builds. An authorized local attacker can exploit this to disclose sensitive information. The CVSS 3.1 base score is 5.5, indicating medium severity, with attack vector local, low attack complexity, and low privileges required. Microsoft has issued an official fix for this vulnerability.

An authorized local attacker can disclose sensitive information by exploiting the insertion of sensitive data into log files. There is no impact on integrity or availability, only confidentiality is affected. No known exploits are reported in the wild.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions to remediate this vulnerability. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85857 for update details.