Microsoft Windows NDIS Out-of-Bounds Read Vulnerability Allowing Information Disclosure

A vulnerability allowing out-of-bounds read has been identified in the Windows Network Driver Interface Specification (NDIS). This issue allows an authorized attacker to disclose information through a physical attack. The vulnerability affects several versions of Windows, including various editions of Windows Server, Windows 10, and Windows 11.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure, specifically certain kernel memory contents.

Remediation

Users can apply the security update for this vulnerability, which is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5073724, KB5073722, KB5073450, KB5073455, KB5073379, and KB5073696.