Win32k Information Disclosure Vulnerability

An attacker with local access to a Windows system could read sensitive information from kernel memory that they should not be able to access. This is a low-severity local issue that does not affect remote operations or cause system compromise.

Windows administrators managing Windows 11 or Windows Server 2025 systems should care about this issue. Servers exposed to untrusted local users or staff are at higher risk, particularly those in publicly accessible facilities or environments where contractor/vendor accounts exist.

An attacker who already has a user account on the Windows system could execute code locally to read portions of kernel memory through the Win32K component, extracting sensitive information that would normally be protected. This requires the attacker to already be on the system—it cannot be exploited remotely.