NetSight
medium5.5

CVE-2026-70261

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information…

Impact

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.

Affected products

VendorProductAffected versions
MicrosoftWindows Server 2012
from 6.2.9200.0 before 6.2.9200.26434
MicrosoftWindows 10 Version 21H2
from 10.0.19044.0 before 10.0.19044.7807
MicrosoftWindows Server 2016 (Server Core Installation)
from 10.0.14393.0 before 10.0.14393.9612
MicrosoftWindows 10 Version 22H2
from 10.0.19045.0 before 10.0.19045.7807
MicrosoftWindows Server 2012 R2 (Server Core Installation)
from 6.3.9600.0 before 6.3.9600.23470
MicrosoftWindows 11 Version 26H1
from 10.0.28000.0 before 10.0.28000.3231
MicrosoftWindows Server 2025
from 10.0.26100.0 before 10.0.26100.33650
MicrosoftWindows Server 2016
from 10.0.14393.0 before 10.0.14393.9612
MicrosoftWindows Server 2019 (Server Core Installation)
from 10.0.17763.0 before 10.0.17763.9376
MicrosoftWindows Server 2025 (Server Core Installation)
from 10.0.26100.0 before 10.0.26100.33650
MicrosoftWindows 11 Version 24H2
from 10.0.26100.0 before 10.0.26100.9711
MicrosoftWindows 10 Version 1607
from 10.0.14393.0 before 10.0.14393.9612
MicrosoftWindows 10 1607
before 10.0.14393.9612
MicrosoftWindows 10 1809
before 10.0.17763.9376
MicrosoftWindows 10 21h2
before 10.0.19044.7807
MicrosoftWindows 10 22h2
before 10.0.19045.7807
MicrosoftWindows 11 23h2
before 10.0.22631.7652
MicrosoftWindows 11 24h2
before 10.0.26100.9711
MicrosoftWindows 11 25h2
before 10.0.26200.9711
MicrosoftWindows 11 26h1
before 10.0.28000.3231
MicrosoftWindows 11 26h2
before 10.0.26300.9711
MicrosoftWindows Server 2012
All versions
Version r2
MicrosoftWindows Server 2016
before 10.0.14393.9612
MicrosoftWindows Server 2019
before 10.0.17763.9376

Weakness classification

References