PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-69344 Microsoft CVE debrief

An out-of-bounds read vulnerability in Windows Print Spooler Components allows an authorized attacker to disclose information locally. The vulnerability has a CVSS score of 5.5 and a severity of MEDIUM. Microsoft has released a patch for this vulnerability. Affected product deployments should be confirmed to exist in managed environments and assigned an owner for follow-up. The vulnerability affects various versions of Windows 10, Windows 11, and Windows Server. System administrators and security teams should assess exposure and apply patches.

Vendor
Microsoft
Product
Windows 10 Version 21H2
CVSS
MEDIUM 5.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-09-08
Original CVE updated
2026-09-17
Advisory published
2026-09-08
Advisory updated
2026-09-17

Who should care

System administrators and security teams responsible for Windows systems, especially those managing Windows 10, Windows 11, and Windows Server environments, should assess exposure and apply patches. They should also verify and apply Microsoft's patch, monitor Windows Print Spooler Components for suspicious activity, and assess the exposure of Windows systems to this vulnerability.

Why it matters

The vulnerability allows an authorized attacker to disclose information locally, and its exploitation requires local access. System administrators and security teams should assess exposure and apply patches.

  • Verify and apply patches for Windows Print Spooler Components
  • Monitor Windows Print Spooler Components for suspicious activity
  • Assess exposure of Windows systems to this vulnerability

Technical summary

The vulnerability is an out-of-bounds read in Windows Print Spooler Components that allows an authorized attacker to disclose information locally. The vulnerability affects various versions of Windows 10, Windows 11, and Windows Server. It requires local access for exploitation and has a CVSS score of 5.5 with a severity of MEDIUM. Microsoft has provided a patch for this vulnerability.

Defensive priority

Apply patches for Windows Print Spooler Components vulnerability

Recommended defensive actions

  • Apply patches for Windows Print Spooler Components vulnerability
  • Verify and apply Microsoft's patch
  • Monitor Windows Print Spooler Components for suspicious activity

Evidence notes

The CVE record and NVD vulnerability detail page provide information on the vulnerability, including its description, CVSS score, and affected products.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-69344 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-69344

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-69344 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-69344

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.