Executive brief
Windows Wireless Wide Area Network Service contains an out-of-bounds read vulnerability that allows an authorized local attacker to access sensitive information from system memory. This could lead to disclosure of confidential data such as encryption keys, credentials, or other sensitive system information that an attacker could use for further compromise.
Technical details
An out-of-bounds read vulnerability exists in the Windows Wireless Wide Area Network Service, where the service fails to properly validate memory access boundaries. An authorized attacker with local access can craft malicious requests to trigger the vulnerability and read arbitrary data from adjacent memory regions. The vulnerability requires prior authentication/authorization and local execution context. A successful exploit could disclose sensitive information stored in kernel memory or adjacent process memory, potentially including encryption keys, tokens, or other secrets. Microsoft has released patches to correct the memory access bounds checking.
Affected products
- Microsoft Windows <UNKNOWN>
Timeline
- 2026-09-08: disclosed