Microsoft Windows Cryptographic Services Information Disclosure Vulnerability

A vulnerability exists in Windows Cryptographic Services due to the use of a cryptographic primitive with a risky implementation. This flaw allows an authorized attacker to locally disclose information, potentially including secrets or privileged data belonging to the user of the affected application.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5066835, KB5066791, KB5066780, KB5066586, and KB5066782.