An out‑of‑bounds read flaw exists in Microsoft Defender for Endpoint that allows an authorized attacker to read sensitive information. The weakness is a classic out‑of‑bounds read (CWE‑125). The vulnerability can lead to disclosure of data residing outside of the intended buffer, potentially revealing confidential or system information. No remote code execution or privilege escalation is directly described; the impact is limited to confidentiality with local privileges.

Microsoft Defender for Endpoint for Windows is affected. No specific version details are provided, so all installations of Defender for Endpoint that do not have the latest security updates are potentially vulnerable.

The flaw has a CVSS score of 5.5, indicating moderate severity. EPSS information is not available, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be local because the description specifies an authorized attacker. An exploit would require an attacker who already has legitimate access to the target system and could trigger the out‑of‑bounds read to exfiltrate data.