An untrusted pointer dereference flaw exists in Windows’ Network File System (SMB). When an authorized local user accesses the file system, the kernel can incorrectly dereference a pointer and expose sensitive data that should remain protected. The vulnerability is identified as CWE‑822, signifying that trust assumptions or permissions were improperly handled, leading to a confidentiality breach.

Microsoft Windows 10 versions 1607, 1809, 21H2, 22H2 and Windows 11 versions 23H2, 24H2, 25H2, 26H2, 26H1, together with Windows Server 2012, 2012 R2, 2016, 2019, 2022, 2025 and their Server Core installations are affected. All listed releases are impacted regardless of processor architecture as the exploit relies on local privilege aspects rather than specific binaries.

The CVSS score of 4.7 indicates moderate complexity and a limited impact. Availability is not affected, and the vulnerability can be triggered only by users who already have authorization to the host. The EPSS value is not available, and the vulnerability is not currently listed in the CISA KEV catalog. Consequently, exploitation is expected to be confined to environments where local users have sufficient access to the network file system; remote exploitation from outside the host is not viable under the current description.