Privileged heap disclosure via non-atomic registry commits

Windows Kernel information disclosure allows local users to read privileged-process heap memory through crafted registry transactions. The Configuration Manager can partially commit a KTM registry transaction after an out-of-memory error, falsely report success, and leave registry changes non-atomic. Exploitation requires low-privileged local code to coordinate the transaction failure with a privileged process running as another user.