---
id: "CVE-2026-96022"
page: "https://infrastack.ai/live/CVE-2026-96022"
kind: "vulnerability"
aliases: ["CVE-2026-96022"]
title: "Windows: Text Services Framework uninitialized memory leaks data locally"
severity: "medium"
cvss: 5.6
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "windows"]
not_affected_if: []
published_at: "2026-11-10T19:21:58+00:00"
first_seen_at: "2026-11-10T19:25:27+00:00"
updated_at: "2026-11-10T20:00:15+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96022", "first_seen_at": "2026-11-10T19:25:27+00:00"}]
exploit_sources: []
---

# Windows: Text Services Framework uninitialized memory leaks data locally

Link for people: https://infrastack.ai/live/CVE-2026-96022 (this .md is for agents)

Windows Text Services Framework reads an uninitialized resource, so an authorized local user can disclose information. The sources do not say what data is exposed or how much.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:25:27+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-96022

## From the sources

Use of uninitialized resource in Windows Text Services Framework allows an authorized attacker to disclose information locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_