Microsoft Windows Kernel Information Disclosure Vulnerability

A vulnerability exists in the Windows Kernel that allows unauthorized attackers to locally disclose sensitive information by inserting it into a log file. This could lead to unintentional read access of kernel memory from a user mode process.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information stored in kernel memory, potentially allowing an attacker to read confidential data from the kernel space.

Remediation

Users can apply the security update for their specific version of Windows Server. Security update KB5073722 is available for Windows Server 2016, KB5074109 for Windows Server 2025, KB5073450 for Windows Server 2022 (23H2 Edition), KB5073723 for Windows Server 2019, and KB5073457 for Windows Server 2022. For Windows Server 2025 (Server Core installation), the same security update KB5074109 applies.