the fix can't be in server/handle.c (the access bits meaning depends on the object you're considering...)
looking at server/process.c:process_map_access: setting PROCESS_QUERY_INFORMATION always set PROCESS_QUERY_LIMITED_INFORMATION (but not the other way around)
so you need to figure out where an access is tested against PROCESS_QUERY_INFORMATION while it should be against PROCESS_QUERY_LIMITED_INFORMATION
hint: VirtualQueryEx -> NtQueryVirtualMemory -> get_basic_memory_info -> which queues an APC (APC_VIRTUAL_QUERY)