cve 2026 41087

CVE 2026 41087 identifies a Microsoft Windows File Explorer information-disclosure vulnerability described in the July 14, 2026 security advisory. The flaw affects supported Windows 10, Windows 11, and Windows Server releases below the specified patched build levels. A locally authenticated, low-privilege attacker may be able to expose sensitive data through File Explorer. The vulnerability has a CVSS 3.1 base score of 5.5 and does not provide remote code execution or administrator privileges. This tag collects discussion of the vulnerability, its practical security impact, affected Windows versions, Microsoft’s patch requirements, and considerations for administrators reviewing systems for exposure and remediation.