CVE-2026-70145 Microsoft CVE debrief

Who should care

Defenders responsible for Windows systems, particularly those managing local security and patch management, should assess exposure and prioritize patching.

Why it matters

CVE-2026-70145 is a medium-severity vulnerability in the Microsoft Windows Search Component that could allow local information disclosure. Defenders should prioritize patching and inventory vulnerable systems.

• Local information disclosure is possible, requiring verification of system exposure.
• Patching is required to prevent potential local exploitation.
• Inventory and monitoring may be necessary to detect vulnerable systems and potential exploitation attempts.

Technical summary

The vulnerability is an out-of-bounds read issue in the Microsoft Windows Search Component. It has a CVSS score of 5.5 and is classified as MEDIUM severity. An authorized attacker could exploit this vulnerability locally to disclose information. The vulnerability affects Microsoft Windows systems, and defenders should review and apply the available patch from Microsoft. Inventory Windows systems for exposure based on provided CPE criteria and monitor for local exploitation attempts.

Defensive priority

Medium

Recommended defensive actions

• Review and apply the available patch from Microsoft.
• Inventory Windows systems for exposure based on provided CPE criteria.
• Monitor for local exploitation attempts.

Evidence notes

The CVE record and NVD entry provide details about the vulnerability, including its CVSS score and affected products. The vulnerability is an out-of-bounds read issue in the Microsoft Windows Search Component. There are no additional details on exploitation attempts or publicly available exploits. However, defenders should verify system exposure and review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.