Microsoft Windows USB Video Driver Information Disclosure Vulnerability

A vulnerability allowing out-of-bounds read has been identified in the Windows USB Video Driver. This issue could enable an authorized attacker to disclose information through a physical attack. The vulnerability affects multiple versions of Windows 10, Windows 11, and Windows Server 2025.

Impact

Exploitation of this vulnerability could allow an attacker to read small portions of heap memory, potentially leading to unauthorized information disclosure.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates can be downloaded via the Microsoft Update Catalog or through Windows Update. Specific update details can be found in the Microsoft Knowledge Base articles KB5053602, KB5053598, KB5053636, and KB5053606.