Local information disclosure via weak authentication

Weak authentication in Microsoft Windows Search Component on supported Windows releases allows local users to read information. Microsoft has not disclosed the specific Windows Search interface or trust check at fault; public records identify only an authentication weakness that accepts a local authenticated caller where stronger access validation should apply. Exploitation requires local low-privileged access with no user interaction, and the published CVSS vector bounds impact to confidentiality rather than code execution or service interruption.