Executive brief
Windows Spaceport.sys is a kernel-mode driver component used by the Windows operating system for graphics and display functionality. An authorized attacker can exploit an out-of-bounds read vulnerability in this driver to disclose sensitive information from kernel memory, potentially revealing system secrets or data from other processes running on the machine.
Technical details
This vulnerability is an out-of-bounds read in the Windows Spaceport.sys kernel-mode driver, which handles graphics-related operations. The vulnerability requires an authorized local attacker with some level of system privilege to trigger the vulnerable code path and read memory outside of allocated bounds. By crafting specific input or performing targeted actions, an attacker can leak kernel memory contents, potentially exposing sensitive information such as security tokens, encryption keys, or data belonging to other processes. Microsoft has released a patch to address this issue; administrators should apply the security update to affected Windows systems.
Affected products
- Microsoft Windows
Timeline
- 2026-09-08: disclosed