cve 2026 33842

The cve 2026 33842 tag covers Microsoft’s July 2026 security fix for an Important-rated information-disclosure vulnerability in Windows File Explorer. The flaw could allow a locally authenticated attacker to expose sensitive information without requiring another user to interact with a file or dialog. Microsoft addressed the issue in the July 14, 2026 security updates, and the vulnerability has a CVSS 3.1 base score of 5.5. At release, Microsoft had not identified public disclosure or active exploitation. This archive provides related coverage of the vulnerability, Microsoft’s security update, and the practical recommendation to install the applicable July 2026 cumulative update.