Microsoft Search Information Disclosure Vulnerability

<p>An Information disclosure vulnerability exists when Windows Search improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit the vulnerability, the attacker could send specially crafted messages to the Windows Search service. Additionally, in an enterprise scenario, a remote unauthenticated attacker could trigger the vulnerability through an SMB connection.</p> <p>The security update addresses the vulnerability by correcting how Windows Search handles objects in memory.</p>

Where it's fixed