The flaw is an out‑of‑bounds read in the Windows kernel that can be triggered by malicious network traffic from an unauthorized attacker. When the overread occurs, the kernel can crash, causing the operating system to reboot or become unresponsive. The attack does not compromise the confidentiality or integrity of data, but it does undermine availability, resulting in a denial‑of‑service condition. This vulnerability aligns with CWE‑125.

Affected systems listed by the CNA include Microsoft Windows 10 versions 1607, 1809, 21H2, and 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1; and Microsoft Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025 in both full and Server Core installations. All these builds are impacted as noted in the CNA vendor/product list.

The CVSS score of 5.3 categorizes this flaw as a moderate‑severity vulnerability. No EPSS score is available, so the current likelihood of exploitation cannot be quantified, and the flaw is not listed in the CISA KEV catalog. Exploitation does not require authentication and can be attempted remotely over the network, making the attack vector accessible to unauthenticated adversaries. While the impact is limited to a disruption of service, the moderate CVSS score and potential for network‑based exploitation justify prompt remediation.