Windows Search Information Disclosure Vulnerability

An information disclosure vulnerability exists when Windows Search handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.

To exploit the vulnerability, an attacker could send specially crafted SMB messages to the Windows Search service.

The security update addresses the vulnerabilities by correcting how Windows Search handles objects in memory.