Microsoft Windows and Windows Server Information Disclosure Vulnerability in Capability Access Management Service

A vulnerability allowing out-of-bounds read has been identified in the Capability Access Management Service (camsvc) on Microsoft Windows and Windows Server platforms. This vulnerability allows an authorized attacker to locally disclose information by reading the memory of the Capability Access Manager service.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure by allowing an attacker to read sensitive data from the memory of the affected service.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. Instructions for downloading the security update are available through the Microsoft Update Catalog. Specific knowledge base article links for each affected product version are also provided in the security update guide.