Windows Cryptographic Services Information Disclosure Vulnerability

Windows Cryptographic Services uses a risky cryptographic method that allows an authorized attacker to steal sensitive information from the system. This matters because cryptographic services protect important data like passwords and encryption keys.

A flawed cryptographic primitive implementation in Windows Cryptographic Services enables local information disclosure via CWE-1240 (Use of a Cryptographic Primitive with a Risky Implementation). An authorized local attacker can exploit this vulnerability to extract sensitive cryptographic material or related secrets; the attack requires prior system access but does not require elevated privileges.