---
id: "CVE-2026-112806"
page: "https://infrastack.ai/live/CVE-2026-112806"
kind: "vulnerability"
aliases: ["CVE-2026-112806"]
title: "Windows Print Spooler: weak credential protection lets a local user read secrets"
severity: "medium"
cvss: 4.7
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "print-spooler", "windows"]
not_affected_if: ["no-local-accounts"]
published_at: "2026-11-10T19:18:43+00:00"
first_seen_at: "2026-11-10T19:24:34+00:00"
updated_at: "2026-11-10T20:04:18+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112806", "first_seen_at": "2026-11-10T19:24:34+00:00"}]
exploit_sources: []
---

# Windows Print Spooler: weak credential protection lets a local user read secrets

Link for people: https://infrastack.ai/live/CVE-2026-112806 (this .md is for agents)

Windows Print Spooler components protect some credentials insufficiently, so an authorized local attacker can read them. The sources report only local information disclosure and give no further detail.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:24:34+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112806

## From the sources

Insufficiently protected credentials in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_