CVE-2025-26636

CVE-2025-26636 is a medium-severity information disclosure vulnerability affecting Microsoft Windows 11 24H2 and Windows Server 2025. It stems from a processor optimization that removes or modifies security-critical code within the Windows Kernel, allowing a local, authorized attacker to disclose sensitive information. The vulnerability has a CVSS score of 5.5, indicating a low attack complexity and requiring local user privileges for exploitation, with a high impact on confidentiality. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it has received some community and media attention.