Windows SMB Information Disclosure Vulnerability

An attacker with local access to a Windows system could read sensitive information from uninitialized memory in the SMB service, potentially exposing credentials or configuration data used by network operations.

Organizations running Windows 10 or Windows Server (2016, 2019, 2022, 2025) on workstations or servers connected to corporate networks. Staff with local system access, particularly those with domain user accounts used on shared workstations, face the highest risk of being exploited by malicious colleagues or compromised accounts.

An attacker must first gain local access to a Windows system (e.g., via compromised user account or physical access). Once logged in locally, they can interact with the SMB service to trigger the uninitialized resource and read memory contents that may contain sensitive data.