The flaw arises from incorrect data forwarding during transient execution in certain Intel processors, enabling a system software adversary with a privileged user to expose information. The vulnerability may be triggered by a local user with elevated privileges and a complex attack, and it requires no user interaction. The primary impact is a high‑level confidentiality breach; integrity and availability are not affected.

Intel(R) Processors are affected. No specific model or firmware version details are provided in the advisory, so any Intel processor that can run a ring 0 context (hypervisor or kernel) and is subject to the described transient execution handling may be vulnerable.

The CVSS score of 4 indicates a moderate severity, and the EPSS score of less than 1% suggests a low likelihood of exploitation at this time. The vulnerability is not listed in the CISA KEV catalog. Exploitation would require local access to a privileged user account and a relatively complex attack step, making it practical mainly in scenarios where the attacker already has administrative or hypervisor control.