Microsoft Windows Cryptographic Information Disclosure Vulnerability

A cryptographic information disclosure vulnerability exists in multiple Windows products, including various Windows Server versions and Windows 10 and 11. This vulnerability allows an attacker to read the contents of encrypted PKCS1 information from a user mode process, potentially leading to unauthorized access to sensitive data.

Impact

Exploitation of this vulnerability could result in unauthorized access to encrypted information, specifically PKCS1 data, from a user mode process.

Remediation

Users can apply the security update KB5050009 to address this vulnerability. This update is available through the Microsoft Update Catalog. For Windows Server 2022, the relevant update is KB5049984.