Local information disclosure via buffer over-read

A buffer over-read in Microsoft Windows Storage Management Provider allows local authenticated users to disclose sensitive memory data. The provider reads beyond a buffer boundary while processing attacker-controlled data and returns adjacent memory; Microsoft has not disclosed the affected function or input structure. A low-privilege account and local code execution are required, and the reported consequence is confidentiality loss without data modification or service interruption.