Microsoft Windows Hyper-V Information Disclosure Vulnerability

A vulnerability in Windows Hyper-V has been identified, allowing an authorized attacker to improperly access and disclose information locally. This issue arises from inadequate access control, creating a potential risk by allowing sensitive data to be exposed.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure from a guest virtual machine to the Hyper-V host server, violating the security boundary of virtualization.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. This security update is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5073379, KB5074109, KB5073450, KB5073724, KB5073457, and KB5073723.