Microsoft · Windows · CVE-2021-24107
**Name of the Vulnerable Software and Affected Versions**
Windows (affected versions not specified)
**Description**
An information disclosure flaw exists in Event Tracing for Windows (ETW), a system that supports most Windows security tooling. The issue occurs because a kernel pointer is returned to usermode callers. Although an attempt was made to zero out the pointer, only a 4-byte write was performed instead of clearing the full 8-byte value, leaving the upper half of the kernel address intact and leakable. This allows attackers to obtain sensitive information and affect the system.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.