6.5
Medium
CVE-2026-96206 Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information…
Description
Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows Subsystem for Linux (WSL2) 3.0 | earliest → < 3.0.1 | 3.0.1 |
References
- Windows Subsystem for Linux Information Disclosure Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Windows Subsystem for Linux (WSL2)
The 8 CVEs of Windows Subsystem for Linux (WSL2) →
CVE-2026-102204
Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized…
7.8
High
CVE-2026-85879
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to…
7.0
High
CVE-2026-57973
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to…
6.3
Medium
CVE-2026-57968
Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally
7.8
High