AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

MicrosoftCVE-2026-68873

Microsoft Windows Program Compatibility: information disclosure

Microsoft

CVE-2026-68873 · Published Sep 8, 2026 · updated Sep 17, 2026

Medium5.5
Fix: upgrade to 10.0.22631.7582 or later (5 fixed versions below)
Microsoft advisory

Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally.

Affected versions

PackageAffectedFixed in
Windows 11 Version 23H2
Product
>= 10.0.22631.0, < 10.0.22631.758210.0.22631.7582
Windows 11 Version 24H2
Product
>= 10.0.26100.0, < 10.0.26100.944510.0.26100.9445
Windows 11 Version 25H2
Product
>= 10.0.26200.0, < 10.0.26200.944510.0.26200.9445
Windows 11 version 23H2
Product
>= 10.0.22631.0, < 10.0.22631.758210.0.22631.7582
Windows 11 version 26H1
Product
>= 10.0.28000.0, < 10.0.28000.295410.0.28000.2954
Windows Server 2025
Product
>= 10.0.26100.0, < 10.0.26100.3343810.0.26100.33438
Windows Server 2025 (Server Core installation)
Product
>= 10.0.26100.0, < 10.0.26100.3343810.0.26100.33438
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-532, CWE-908

More Microsoft advisories

All Microsoft
High 8.3Sep 8Microsoft Skype for Business: spoofingCVE-2026-69646fixed in 6.0.9319.885 +2Medium 6.5Sep 8Microsoft Skype for Business: cross-site scriptingCVE-2026-69642fixed in 6.0.9319.885 +2High 7.1Sep 8Microsoft Skype for Business: spoofingCVE-2026-66305fixed in 6.0.9319.885 +2Medium 6.5Sep 8Microsoft Skype for Business: information disclosureCVE-2026-66306fixed in 6.0.9319.885 +2High 7.5Sep 8Microsoft Skype for Business: integer overflowCVE-2026-66307fixed in 6.0.9319.885 +2Medium 6.5Sep 8Microsoft Skype for Business: out-of-bounds readCVE-2026-66308fixed in 6.0.9319.885 +2