Microsoft Windows Kernel Information Disclosure Vulnerability

A vulnerability exists in the Windows Kernel that allows an authorized attacker to locally disclose sensitive information by inserting it into a log file. This could potentially include memory addresses from kernel space, which an attacker might exploit for malicious purposes.

Impact

Exploitation of this vulnerability could lead to unauthorized disclosure of sensitive information, specifically certain memory addresses within kernel space.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5082200 for various Windows 10 versions, KB5082052 for Windows 11 Version 23H2 for x64-based Systems, KB5083769 for Windows 11 Version 25H2 for x64-based Systems, KB5082063 for Windows Server 2025, and KB5082142 for Windows Server 2022.