Kernel-address disclosure via uninitialized pointer return

Information disclosure in the Microsoft Windows Kernel allows local users with low privileges to read kernel memory through crafted local calls. A public proof of concept shows the kernel returns an uninitialized kernel pointer to user mode, exposing an address that should have been cleared. Local code execution is required; the disclosed primitive reveals kernel address information but does not itself write memory or execute code.