Kernel-memory disclosure via uninitialized registry buffer

Information disclosure in the Windows kernel across affected Windows 10, Windows 11, and Windows Server builds allows local users to read kernel memory. The VrpPostEnumerateKey registry callback allocates a paged-pool buffer from a user-controlled length, fills only the returned data, then copies the entire buffer to user mode, exposing uninitialized bytes. A nonadministrator authenticated account can trigger the registry operation locally; the disclosed content is limited to uninitialized kernel memory, with no reported write or service-interruption impact.