MicrosoftCVE-2026-59130

Microsoft AMD Zen: information disclosure

Medium5.6CVE-2026-59130 · Published Aug 11, 2026 · updated Aug 25, 2026

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.

Microsoft advisory

Affected versions

Package	Affected	Fixed in
Windows 10 Version 1607 Product	>= 10.0.14393.0, < 10.0.14393.9418	10.0.14393.9418
Windows 10 Version 1809 Product	>= 10.0.17763.0, < 10.0.17763.9121	10.0.17763.9121
Windows 10 Version 21H2 Product	>= 10.0.19044.0, < 10.0.19044.7663	10.0.19044.7663
Windows 10 Version 22H2 Product	>= 10.0.19045.0, < 10.0.19045.7663	10.0.19045.7663
Windows 11 Version 23H2 Product	>= 10.0.22631.0, < 10.0.22631.7517	10.0.22631.7517
Windows 11 Version 24H2 Product	>= 10.0.26100.0, < 10.0.26100.9168	10.0.26100.9168
Windows 11 Version 25H2 Product	>= 10.0.26200.0, < 10.0.26200.9168	10.0.26200.9168
Windows 11 version 23H2 Product	>= 10.0.22631.0, < 10.0.22631.7517	10.0.22631.7517
Windows 11 version 26H1 Product	>= 10.0.28000.0, < 10.0.28000.2704	10.0.28000.2704
Windows Server 2012 R2 Product	>= 6.3.9600.0, < 6.3.9600.23338	6.3.9600.23338
Windows Server 2012 R2 (Server Core installation) Product	>= 6.3.9600.0, < 6.3.9600.23338	6.3.9600.23338
Windows Server 2016 Product	>= 10.0.14393.0, < 10.0.14393.9418	10.0.14393.9418

Details and references

CVSS 3.1: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-1303, CWE-200

More Microsoft advisories

Date	Advisory	Severity	Fixed in
Aug 11	Copilot Chat Security Feature Bypass Vulnerability High7.1Aug 11 CVE-2026-656751.132.1	High7.1	1.132.1
Aug 11	Copilot Custom Agent Hook Remote Code Execution Vulnerability High7.8Aug 11 CVE-2026-703351.132.1	High7.8	1.132.1
Aug 11	Information disclosure vulnerability MediumAug 11 CVE-2026-472851.132.1	Medium	1.132.1
Aug 11	Fileless RCE in VS Code Web Remote Terminal via URL-Controlled NODE_OPTIONS High8.8Aug 11 CVE-2026-703361.132.1	High8.8	1.132.1
Aug 11	Visual Studio Code web deployments - environmentService.ts - RCE via NODE_OPTIONS --import from URL payload High8.8Aug 11 CVE-2026-693201.132.1	High8.8	1.132.1
Aug 11	TerminalInstance._createProcess - Workspace Trust bypass via terminal waitOnExit High7.8Aug 11 CVE-2026-692781.132.1	High7.8	1.132.1

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.