VulnerabilityAwaiting Analysis

CVE-2026-68831

Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.

MEDIUM 5.5EPSS 0.30%

Does this matter?

Lower severity and a low EPSS score (0.30%). Track it; it rarely justifies an emergency change on its own.

Description

Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.

CVSS 3.1: 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.30% probability · 23th percentile
CISA KEV: Not listed
Weakness: CWE-552
Source: secure@microsoft.com

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68831

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.