Product:
Windows WLAN Auto Config Service
Summary
An out-of-bounds read vulnerability in Windows WLAN Auto Config Service allows an authorized attacker to disclose information locally. This can lead to unauthorized access to sensitive information. The issue arises due to improper handling of memory, which can be exploited by attackers with low privileges.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-55695 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system. By leveraging the out-of-bounds read condition, the attacker can potentially read sensitive information from memory that should not be accessible. This requires the attacker to execute a specially crafted application or script that triggers the vulnerability.
Affected Products
- Windows WLAN Auto Config Service: A service that manages wireless network connections on Windows devices, which is vulnerable to information disclosure due to improper memory handling.
Mitigation
To mitigate this vulnerability, users should ensure that their systems are updated with the latest security patches provided by Microsoft. Additionally, restricting local access to sensitive systems can help reduce the risk of exploitation.