Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

CVE-2026-37453: MSI NBFoundation Service v.2.0.2506.1201: Sensitive Info Exposure

CVE-2026-37453 · published 4 months ago
Summary

A vulnerability in MSI NBFoundation Service v.2.0.2506.1201 could allow an attacker to access sensitive information remotely. This is a security risk because it could lead to unauthorized access to confidential data. To protect yourself, consider updating to a newer version of the software or applying a security patch.

Original advisory text
Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensitive information via the MSI_SERVICE_2 pipe
Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensitive information via the MSI_SERVICE_2 pipe
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-200Information Exposure
Timeline
Published25 Jun 2026
Updated4 Nov 2026
First seen25 Jun 2026
Sources
Track software like this
Free during beta