Executive brief
A security vulnerability has been identified in the Windows Kernel, the core component of the Microsoft Windows operating system. An authorized user with basic access to a computer could exploit this flaw to view sensitive information that should normally be protected. While this does not allow an attacker to take control of the system directly, it could be used to gather data for more complex future attacks.
Technical details
A buffer over-read vulnerability (CWE-126) exists in the Windows Kernel. The flaw is triggered when the kernel reads past the end of an intended buffer, potentially exposing sensitive memory contents to a local attacker. To exploit this, an attacker must already have local execution privileges on the target system (PR:L). Successful exploitation results in unauthorized information disclosure but does not impact system integrity or availability. Microsoft has released security updates for affected versions of Windows 10, Windows 11, and Windows Server 2012 to address this issue.
Affected products
- Microsoft Windows 10 1607, 1809, 21H2, 22H2
- Microsoft Windows 11 24H2, 25H2, 26H1
- Microsoft Windows Server 2012 All editions
Timeline
- 2026-07-14: disclosed
- 2026-07-14: advisory: Microsoft released security updates and advisory.