---
id: "CVE-2026-122162"
page: "https://infrastack.ai/live/CVE-2026-122162"
kind: "vulnerability"
aliases: ["CVE-2026-122162"]
title: "Windows Update Stack: integer underflow lets a local user read information"
severity: "medium"
cvss: 5.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Windows Update Stack", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["infrastructure", "windows"]
not_affected_if: ["unknown"]
published_at: "2026-11-10T19:20:32+00:00"
first_seen_at: "2026-11-10T19:25:09+00:00"
updated_at: "2026-11-10T20:00:38+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-122162", "first_seen_at": "2026-11-10T19:25:09+00:00"}]
exploit_sources: []
---

# Windows Update Stack: integer underflow lets a local user read information

Link for people: https://infrastack.ai/live/CVE-2026-122162 (this .md is for agents)

An integer underflow in the Windows Update Stack lets an authorized local attacker disclose information. The sources give no further detail on what data is exposed.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Windows Update Stack affected range not listed fixed no fixed version listed

## How to check

- Check the Windows build with `winver` and compare it against the Microsoft security update guide entry for CVE-2026-122162

## Timeline

- 2026-11-10T19:25:09+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-122162

## From the sources

Integer underflow (wrap or wraparound) in Windows Update Stack allows an authorized attacker to disclose information locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_