MEDIUM Published October 13, 2026

CVE-2026-96206

Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally.

CVSS base score

6.5 (v3.1)

Severity

MEDIUM

Attack vector

Local

Weakness

CWE-908

Last modified

October 29, 2026

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Affected products

microsoft windows subsystem for linux

View full NVD advisory →

← Back to CVE watch