ActiveSyncProvider Information Disclosure Vulnerability

Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely CVE-2026-119889 · score 6.5/10

What could go wrong?

Private information could leak to someone who should not see it.

How urgent is it?

Check Microsoft’s page for details.

Who is affected?

Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems and 12 more versions

What should I do?

Install this month’s updates via Windows Update, Intune or your update tool, then restart.

Known problems

Microsoft lists known issues per update: KB5131291, KB5131085, KB5131096, KB5131087, KB5132061, KB5132043. Official page.