Microsoft Windows File Explorer Information Disclosure Vulnerability

A vulnerability in Windows File Explorer allows an authorized attacker to locally disclose sensitive information. This issue affects multiple Windows versions, including Windows 10, Windows 11, Windows Server 2016, Windows Server 2022, and Windows Server 2019. The vulnerability arises from the improper handling of object addresses in a sandboxed environment, potentially exposing information from high-integrity applications.

Impact

Successful exploitation could allow an attacker to access sensitive information, such as addresses of objects in a high-integrity execution environment, which could be exploited further.

Remediation

Users can apply the security update KB5073722 for Windows 10, KB5073457 for Windows Server 2022, KB5073723 for Windows Server 2019, and KB5074109 for Windows 11. Instructions for downloading these security updates are available on the Microsoft Update Catalog.