Microsoft Windows Remote Procedure Call Information Disclosure Vulnerability

A vulnerability in Windows Remote Procedure Call (RPC) allows an authorized attacker to locally disclose sensitive information. This issue affects multiple Windows products and versions, including Windows Server 2016, Windows 10 (various versions), Windows Server 2022, and Windows 11 (multiple editions). The vulnerability arises from the exposure of local memory addresses to unauthorized actors.

Impact

Successful exploitation of this vulnerability could lead to unauthorized disclosure of sensitive information, specifically local memory addresses.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles linked in the 'Security Update Guide'.