Executive brief
A security vulnerability exists in the Windows Kernel, the core component of the Windows operating system. An authorized user with low-level access to a computer could exploit this flaw to view sensitive information that should be protected. This could allow an attacker to bypass security features and potentially gain further unauthorized access to the system.
Technical details
An out-of-bounds read vulnerability (CWE-125) exists in the Windows Kernel. The flaw is triggered when the kernel improperly handles memory access, allowing a locally authenticated attacker with low privileges to read data outside of intended memory buffers. This information disclosure can be used to bypass security features such as KASLR (Kernel Address Space Layout Randomization). The vulnerability affects multiple versions of Windows 10, Windows 11, and Windows Server 2012. Microsoft has released security updates to address this issue.
Affected products
- Microsoft Windows 10 1607, 1809, 21H2, 22H2
- Microsoft Windows 11 24H2, 25H2, 26H1
- Microsoft Windows Server 2012 All editions
Timeline
- 2026-07-14: disclosed: Initial publication by Microsoft and NVD.