Microsoft Windows License Manager Information Disclosure Vulnerability

A vulnerability exists in Windows License Manager that allows an authorized attacker to insert sensitive information into a log file, potentially leading to local information disclosure. This issue affects multiple Windows 10 versions, Windows 11, Windows Server 2016, Windows Server 2019, Windows Server 2022, and Windows Server 2025.

Impact

Exploitation of this vulnerability could result in unauthorized local information disclosure, specifically the leakage of sensitive data such as local memory addresses.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates can be downloaded via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5066791, KB5066792, KB5066793, KB5066586, KB5066835, and KB5066836.