Local memory disclosure via buffer over-read

Information disclosure in Windows Wired AutoConfig Service in Microsoft Windows allows local users to read sensitive memory via a buffer over-read. Microsoft's public record identifies the flaw only as a buffer over-read in the service and does not disclose the affected function, parser, or request path. Exploitation requires local low-privileged access with no user interaction, and the published impact is limited to disclosure of service-process memory rather than code execution or service interruption.