Microsoft Windows COM Server Information Disclosure Vulnerability

A vulnerability allowing information disclosure has been identified in the Windows COM Server. This issue arises from the improper handling of memory, which could allow an attacker to read small portions of heap memory. The vulnerability affects several versions of Windows Server and Windows 10, as well as Windows 11 and Windows Server 2022.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive user data outside of the AppContainer execution environment, potentially allowing an attacker to read small portions of heap memory.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates are available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles referenced in the product family section.