Microsoft Windows DWM Core Library Buffer Over-read Vulnerability Allowing Information Disclosure

A buffer over-read vulnerability has been identified in the Windows DWM Core Library. This vulnerability allows an authorized attacker to locally disclose information by reading small portions of heap memory. It affects multiple Windows products and versions, including Windows 10, Windows 11, Windows Server 2016, 2019, 2022, and 2025.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles linked in the 'Security Updates' section.