Microsoft Windows Kernel Information Disclosure Vulnerability

Vulnerability

A vulnerability in the Windows Kernel allows an authorized attacker to locally disclose sensitive information. This issue could potentially be exploited to reveal certain memory addresses within kernel space, which an attacker might leverage for malicious activities.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure, specifically revealing sensitive memory addresses within the kernel, which could be used for further exploitation.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. Security Update KB5066835 is available for Windows 11, Windows Server 2025, and several other Windows 10 and Windows Server versions. For Windows Server 2016, the security update is KB5066836.

Added: Oct 14, 2025, 7:38 PM
Updated: Oct 14, 2025, 7:38 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
3.3
remediation
0.0
relevance
0.7
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.