Microsoft Windows USB Video Driver Information Disclosure Vulnerability

A vulnerability in the Windows USB Video Class System Driver allows an authorized attacker to locally disclose sensitive information. This issue arises from the generation of error messages that contain confidential data, such as specific memory addresses within kernel space. Knowledge of these memory locations could potentially be exploited for further malicious activities.

Impact

Exploitation of this vulnerability could lead to unauthorized disclosure of sensitive information, specifically certain memory addresses within kernel space.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. The update is included in the October 2025 Patch Tuesday release.