Microsoft Windows State Repository API Sensitive Information Disclosure Vulnerability

A vulnerability exists in the Windows State Repository API that allows an authorized attacker to insert sensitive information into a log file, potentially leading to local information disclosure. This issue affects multiple Windows products and versions.

Impact

Exploitation of this vulnerability could result in unauthorized local disclosure of sensitive information, specifically the local memory address.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. This security update is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5066835, KB5066836, KB5066837, KB5066780, KB5066791, KB5066586, and KB5066793.