EUVD-2026-73413
GHSA-4vp8-4w4f-hch2
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Local-only vector with low-privilege requirement; confidentiality-only impact as log reading yields no write or denial-of-service capability.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
3DescriptionCVE.org
Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally.
AnalysisAI
Sensitive information disclosure in the Windows Program Compatibility Assistant (PCA) Service allows a locally authenticated attacker with standard user privileges to read sensitive data written to log files. Affected systems include Windows 11 versions 23H2 through 26H1 and Windows Server 2025 in both full and Server Core configurations. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an interactive or remote desktop session with at least a low-privilege (standard user) Windows account on an affected build of Windows 11 (23H2, 24H2, 25H2, 26H1) or Windows Server 2025. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N accurately reflects the threat model: exploitation is strictly local, requires only a standard (low-privilege) user account, and has no integrity or availability impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft security update that addresses this vulnerability. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today