Information Exposure Through Timing Discrepancy in Microsoft Windows and Windows Server - CVE-2026-6727

Vulnerability details

The vulnerability allows a remote attacker to disclose sensitive information.

The vulnerability exists due to observable timing discrepancy in TPM 2.0 RSA OAEP secret decryption when modifying the encrypted secret and observing precise decryption timing. A remote attacker can perform repeated crafted decryption attempts and measure timing differences to disclose sensitive information.

Exploitation requires the ability to modify the stored encrypted secret and to accurately observe precise timing across many decryption attempts in order to infer the original secret.

Affected software

How to mitigate CVE-2026-6727

External References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-6727

Related Security Bulletins

• Multiple vulnerabilities in Microsoft Windows