Recorded 14 Oct 2026 at 11:22 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position.
See the latest record.
The historical field “Public exploit code” recorded Nuclei detection-template membership. It did not establish exploit availability. The original recorded fields remain below.
The historical “Publicly disclosed: No” field could represent a missing MSRC assessment. It does not establish that the vulnerability was undisclosed. The original recorded fields remain below.
CVEMicrosoft Security Response Center
Windows Program Compatibility Assistant Service Information Disclosure Vulnerability
Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally.
CWE-532: Insertion of Sensitive Information into Log File
Issued by
Microsoft
Customer action
Required: apply the update
Affected products
Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)
Updates that fix it
KB5122871: Windows Server 2025, Windows Server 2025 (Server Core installation) (restart required); KB5122880: Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems (restart required); KB5124008: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems (restart required); KB5124012: Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems (restart required)