CVE-2026-34348

CVSS 3.1: 6.5 medium
EPSS: <1%p58
Published: Jul 14, 2026 · Jul 14, 2026
Modified: Jul 22, 2026

Analyze CVE-2026-34348 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network.

Vendors: microsoft

Products: windows 10 1809, windows 10 21h2, windows 10 22h2, windows 11 23h2, windows 11 24h2, windows 11 25h2, windows 11 26h1, windows server 2019, windows server 2022, windows server 2025

Weakness: CWE-693

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news

2 stories

New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing

Three research teams showed passkey bypasses: WebAuthn assertion replay in Microsoft Entra ID, synced-passkey key recovery in Google Password Manager, and Windows Hello key reuse.

The Hacker NewsAug 11, 12:45 UTC · Aug 11, 2026VulnerabilityCVE-2026-343482 · 1 read

⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply

The Hacker NewsAug 10, 15:03 UTC · Aug 10, 2026RansomwareExploitedCVE-2026-34348 CVE-2026-18497 CVE-2026-63508+432