{"id":"CVE-2026-105531","kind":"vulnerability","aliases":["CVE-2026-105531"],"related":[],"title":"Windows Print Spooler: local user can disclose information via file path","description":"External control of file name or path in Windows Print Spooler Components allows an authorized attacker to disclose information locally.","summary":"Windows Print Spooler components let an authorized local attacker control a file name or path, which discloses information. The sources do not describe the exact data exposed.","severity":"medium","cvss":5.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","print-spooler","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:17:53+00:00","first_seen_at":"2026-11-10T19:24:18+00:00","triaged_at":"2026-11-10T20:02:20+00:00","updated_at":"2026-11-10T20:02:20+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T20:02:20Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Print Spooler: local user can disclose information via file path","impact":"low","summary":"Windows Print Spooler components let an authorized local attacker control a file name or path, which discloses information. The sources do not describe the exact data exposed.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","print-spooler"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"Local attacker reads information they should not see","analyst_note":"Check the Microsoft Security Update Guide entry for CVE-2026-105531 for affected builds, the fixed update and whether the Print Spooler must be enabled.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Systems running the Windows Print Spooler service with local authenticated users. The sources do not say which Windows builds are affected or whether the Print Spooler must be enabled to be exposed.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000647,"input_tokens":4485,"output_tokens":397,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-105531':14A,17A '-2026':13A,16A 'allow':62C 'attack':31B,65C 'author':29B,64C 'compon':26B,61C 'control':32B,51C 'cve':12A,15A 'data':48B 'describ':45B 'disclos':7A,39B,67C 'exact':47B 'expos':49B 'extern':50C 'file':10A,34B,53C 'inform':8A,40B,68C 'infrastructur':18B 'let':27B 'local':4A,30B,69C 'name':35B,54C 'path':11A,37B,56C 'print':2A,20B,24B,59C 'print-spool':19B 'sourc':42B 'spooler':3A,21B,25B,60C 'user':5A 'via':9A 'window':1A,22B,23B,58C","nicknames":[],"mitigations":[],"who_affected":"Systems running the Windows Print Spooler service with local authenticated users. The sources do not say which Windows builds are affected or whether the Print Spooler must be enabled to be exposed.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","medium","printspooler","windows"],"campaign_type":null,"search_a":"'-105531':14A,17A '-2026':13A,16A 'cve':12A,15A 'disclos':7A 'file':10A 'inform':8A 'local':4A 'path':11A 'print':2A 'spooler':3A 'user':5A 'via':9A 'window':1A","search_b":"'attack':31B 'author':29B 'compon':26B 'control':32B 'data':48B 'describ':45B 'disclos':39B 'exact':47B 'expos':49B 'file':34B 'inform':40B 'infrastructur':18B 'let':27B 'local':30B 'name':35B 'path':37B 'print':20B,24B 'print-spool':19B 'sourc':42B 'spooler':21B,25B 'window':22B,23B","search_c":"'allow':62C 'attack':65C 'author':64C 'compon':61C 'control':51C 'disclos':67C 'extern':50C 'file':53C 'inform':68C 'local':69C 'name':54C 'path':56C 'print':59C 'spooler':60C 'window':58C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:17:53+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-105531","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105531","severity":null,"published_at":"2026-11-10T19:17:53+00:00","modified_at":"2026-11-10T19:17:53+00:00","first_seen_at":"2026-11-10T19:24:18+00:00","fetched_at":"2026-11-10T19:24:18+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}