CVE-2026-59136
Microsoft · Published August 11, 2026
5.5
CVSS v3.1
MEDIUMPatch availableGet patch
Description
Microsoft COM for Windows Information Disclosure Vulnerability. Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally.
Affected Products
- Windows 10 Version 1809 for 32-bit Systems
- Windows 10 Version 1809 for x64-based Systems
- Windows Server 2019
- Windows Server 2019 (Server Core installation)
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C