CVEFinder.io

CVE-2026-33842

🔶 medium
🔍 Scan for this CVE
Summary

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

CVSS Score
5.5
Medium
EPSS Score
0.4
Exploit Probability
Published Date
2026-07-14
First Seen: 2026-07-15
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 32.1% of all 340,405 vulnerabilities in our database.

#231,012
Below average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Jul 14, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Partial
Limited system impact
SSVC data provided by CISA
Last Modified 2026-07-22
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE IDs (Weakness Types)
CWE-200

📦 Affected Products 14

Vendor Product Status Affected Versions
microsoft windows_server_2012 Affected
v-
microsoft windows_server_2012 Affected
vr2
microsoft windows_server_2016 Affected
< 10.0.14393.9339
microsoft windows_server_2019 Affected
< 10.0.17763.9020
microsoft windows_server_2022 Affected
< 10.0.20348.5386
microsoft windows_10_1809 Affected
< 10.0.17763.9020
microsoft windows_10_21h2 Affected
< 10.0.19044.7548
microsoft windows_10_22h2 Affected
< 10.0.19045.7548
microsoft windows_10_1607 Affected
< 10.0.14393.9339
microsoft windows_11_23h2 Affected
< 10.0.22631.7376
microsoft windows_11_24h2 Affected
< 10.0.26100.8875
microsoft windows_server_2025 Affected
< 10.0.26100.33158
microsoft windows_11_25h2 Affected
< 10.0.26200.8875
microsoft windows_11_26h1 Affected
< 10.0.28000.2269

🔗 References 1

https://msrc.microsoft.com/update-guide/vulnerabilit...
Patch Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-58598 ⚠️ high 7.0 0.2 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine all... 2026-07-16
CVE-2026-34346 🔶 medium 5.5 0.2 Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized at... 2026-07-14
CVE-2026-40378 ⚠️ high 7.5 0.8 Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (LSASS) allows an unau... 2026-07-14
CVE-2026-40400 ⚠️ high 8.0 0.7 Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network. 2026-07-14
CVE-2026-42975 ⚠️ high 8.0 0.3 Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adja... 2026-07-14
CVE-2026-42990 ⛔ critical 9.8 0.7 Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network. 2026-07-14
These CVEs affect the same products