cve 2026 40422

The cve 2026 40422 tag covers reporting on a Windows File Explorer information-disclosure vulnerability addressed by Microsoft’s July 14, 2026 security updates. Microsoft rates the issue Important and assigns it a CVSS 3.1 base score of 5.5. The flaw results from File Explorer using an uninitialized resource, and successful exploitation could expose information an attacker should not be able to access. Exploitation requires an authorized attacker to act locally on an affected system. This tag archive provides focused context for organizations reviewing the update, assessing exposure across managed Windows fleets, and treating the fix as a routine but necessary security-patching item.