Microsoft Windows Web Account Manager Information Disclosure Vulnerability

A vulnerability in Windows File Explorer allows an authorized attacker to locally disclose sensitive information. This issue affects several versions of Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022. The vulnerability arises from the improper handling of information in a sandboxed execution environment, potentially allowing access to high-integrity addresses from certain objects.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure, specifically addresses from objects operating at a high integrity level.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles linked within the security update guide.