Information Disclosure Risk in Microsoft Windows Codecs Library
CVE-2026-96150

5.6MEDIUM

Key Information:

Vendor

Microsoft
Status
Microsoft Office For Android
Windows 10 Version 1607
Windows 10 Version 1809
Windows 10 Version 21h2
Vendor
CVE Published:
10 November 2026

What is CVE-2026-96150?

An information disclosure vulnerability exists in the Microsoft Windows Codecs Library, where an authorized attacker can exploit the presence of uninitialized resources. This flaw may allow attackers to access sensitive information stored locally, which poses a significant risk to user data security. The vulnerability highlights the importance of applying the latest security updates to mitigate potential exploitation.

Affected Version(s)

Microsoft Office for Android 16.0.1 < 16.0.20625.20014

Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.9688

Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.9487

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
5.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.