Local memory disclosure via improper object handling

Information disclosure in Microsoft Windows GDI allows local users to retrieve memory contents by running a crafted application. GDI mishandles in-memory objects and exposes memory addresses, but Microsoft has not identified the affected object type or operation. Exploitation requires logon and execution of the application; the disclosure does not execute code alone but can support a separate exploit chain.