Executive brief
A vulnerability in the Windows Kernel allows an authorized local user to access sensitive system information they should not be able to view. While the attacker must have valid credentials to exploit this flaw, successful exploitation could reveal sensitive details about the system's internal state and configuration, potentially aiding further attacks.
Technical details
This vulnerability involves exposure of sensitive system information in the Windows Kernel to an unauthorized control sphere (an execution context or privilege domain with less authority). The vulnerability is classified as an information disclosure flaw accessible to authorized local attackers. Exploitation requires local access and authentication to the system, but does not require elevated privileges beyond normal user access. A successful attack discloses sensitive kernel-level information that could be leveraged in multi-stage compromise chains. A patch is available from Microsoft.
Affected products
- Microsoft Windows Kernel
Timeline
- 2026-09-08: disclosed