Microsoft Windows COM Type Confusion Vulnerability Allowing Information Disclosure

A type confusion vulnerability in Windows Component Object Model (COM) has been identified, allowing an authorized attacker to locally disclose information. This vulnerability arises from the access of resources using incompatible types, which could potentially be exploited to read user mode service memory.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure.

Remediation

Users can apply the security update KB5082200 for Windows 10, KB5082052 for Windows 11, KB5082142 for Windows Server 2022, and KB5082063 for Windows Server 2025. For Windows Server 2019, the security update KB5082123 is available. These security updates can be downloaded via the Microsoft Update Catalog.