Kernel information disclosure via crafted application

Information disclosure in Microsoft Windows Win32k allows local users to obtain kernel information through a crafted application. Microsoft identifies the flaw only as improper disclosure of kernel information and does not publish the affected function or operation. Exploitation requires logging on to an affected system and running code locally; the disclosed consequence is information useful for further compromise.