NtQuerySystemInformation returns zero ImageBase on Windows 11 25H2 — how to get kernel base without admin?
See the question and my original answer on StackOverflowIt's documented here for EnumDeviceDrivers function
Starting in Windows 11 Version 24H2, EnumDeviceDrivers will require SeDebugPrivilege to return valid ImageBase values. The function will still succeed if the caller does not have this privilege enabled, but the returned lpImageBase array will contain addresses that are all NULL.
It sems logical and security consistent it's been extended to all (kernel) functions returning ImageBase values.