Microsoft Windows Information Disclosure Vulnerability in TWINUI Subsystem

A vulnerability allowing sensitive information exposure has been identified in the Tablet Windows User Interface (TWINUI) Subsystem. This issue allows an authorized attacker to locally disclose information, specifically the local memory address, on affected systems.

Impact

Exploitation of this vulnerability could lead to unauthorized disclosure of sensitive information, such as local memory addresses, to an attacker.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. Security update KB5073724 is available for various Windows 10 versions, while KB5073457 is available for Windows Server 2022. For Windows 11, security update KB5074109 can be applied. Instructions for downloading these security updates are available on the Microsoft Update Catalog.