Insecure Permissions in MSI NBFoundation Service by MSI
CVE-2026-37452

7.5HIGH

Key Information:

Vendor

MSI

Status
NBFoundation Service
Vendor
CVE Published:
25 June 2026

What is CVE-2026-37452?

The MSI NBFoundation Service is prone to an Insecure Permissions vulnerability in its MSIAPService.exe component, which can be exploited by remote attackers to access sensitive information. This security flaw in version 2.0.2506.1201 raises concerns over data confidentiality, calling for immediate attention to ensure user protection. For more information on this issue and its implications, please refer to the official security advisory and GitHub repository.

References

https://csr.msi.com/global/product-security-advisories
https://github.com/LittleSuRii/CVE-2026-MSIAPService

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.