Information Disclosure in Windows Print Spooler

Publication date: 2026-09-08

Last updated on: 2026-09-24

Assigner: Microsoft Corporation

Description

Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-24

Generated

2026-09-29

AI Q&A

2026-09-09

EPSS Evaluated

2026-09-27

NVD

CVE-2026-69552

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	windows_print_spooler_components	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-209	The product generates an error message that includes sensitive information about its environment, users, or associated data.

Attack-Flow Graph

Executive Summary

This vulnerability involves Windows Print Spooler Components generating error messages that contain sensitive information. An authorized attacker could exploit this to disclose information over a network.

Impact Analysis

An attacker could gain access to sensitive data through network disclosure. This may lead to unauthorized information exposure, potentially affecting confidentiality of system or user data.

Mitigation Strategies

Disable the Windows Print Spooler service if not required. Apply Microsoft security updates as soon as they become available. Restrict user permissions to prevent unauthorized access to print spooler components.

Hi! I’m here to help you understand CVE-2026-69552. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70