Microsoft Windows DWM Core Library Out-of-Bounds Read Vulnerability Allowing Information Disclosure

A vulnerability allowing out-of-bounds read has been identified in the Windows DWM Core Library. This issue allows an authorized attacker to locally disclose information by reading portions of heap memory.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. Security update KB5099539 is available for various Windows 10 versions, while KB5099538 can be applied to Windows Server 2019. Windows Server 2022 users should also look for the corresponding security update. For Windows 11, security updates KB5101650 and KB5095051 are available, depending on the specific version and architecture.