Microsoft Windows Network Policy Server SNMP Out-of-Bounds Read Vulnerability Allowing Information Disclosure

A vulnerability allowing out-of-bounds read has been identified in the SNMP implementation of Windows Network Policy Server. This issue allows an unauthorized attacker to disclose information over the network by reading portions of process memory. The vulnerability affects multiple Windows Server and Windows 10 versions.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure over the network.

Remediation

Users can apply the security update for this vulnerability, which is included in the July 2026 Monthly Rollup, available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5099444, KB5099445, KB5099535, KB5101649, KB5099536, KB5099540, and KB5099538.