Windows Kernel Information Disclosure Vulnerability

An attacker with user access to a Windows system could read sensitive kernel memory information that is normally restricted, potentially exposing system configuration details or other data needed for further attacks. This is a low-risk vulnerability in most OT environments because it requires user-level access and only discloses information rather than enabling direct control of systems.

IT managers running Windows 10, Windows 11, Windows Server 2016, 2019, 2022, or 2025 on any engineering workstations, HMI (human-machine interface) servers, or administrative systems that touch OT networks. This affects both 32-bit and 64-bit systems across multiple Windows versions.

An attacker would need a valid user account on the system (or ability to trick a user into running code). Once logged in, they can read protected kernel memory to extract sensitive information. The attack requires user interaction or prior compromise to gain initial access.