Microsoft Windows and Windows Server Capability Access Management Service Information Disclosure Vulnerability

A vulnerability allowing out-of-bounds read in the Capability Access Management Service (camsvc) has been identified. This issue allows an unauthorized attacker to locally disclose sensitive information. The vulnerability affects multiple versions of Windows 11 and Windows Server 2025.

Impact

Exploitation of this vulnerability could lead to unauthorized local information disclosure.

Remediation

Users can apply the security update KB5074109 for Windows 11 or KB5073379 for Windows Server 2025. These security updates are available through the Microsoft Update Catalog.