Описание
Windows Health and Optimized Experiences Service Information Disclosure Vulnerability
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.
FAQ
What type of information could be disclosed by this vulnerability?
Successful exploitation could allow an attacker to access diagnostic information collected by the Windows Health and Optimized Experiences Service, including system configuration, application crash, performance, and kernel driver allocation data.
Обновления
| Продукт | Статья | Обновление |
|---|---|---|
| Windows 11 Version 24H2 for ARM64-based Systems | ||
| Windows 11 Version 24H2 for x64-based Systems | ||
| Windows 11 Version 25H2 for ARM64-based Systems | ||
| Windows 11 Version 25H2 for x64-based Systems | ||
| Windows 11 version 26H1 for x64-based Systems | ||
| Windows 11 Version 26H1 for ARM64-based Systems | ||
| Windows 11 Version 26H2 for ARM64-based Systems | ||
| Windows 11 Version 26H2 for x64-based Systems |
Показывать по
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.
Уязвимость функции оптимизации производительности и работы батареи (Health and Optimized Experiences) операционных систем Windows, позволяющая нарушителю раскрыть защищаемую информацию
EPSS
5.5 Medium
CVSS3