An untrusted pointer dereference in the Windows Virtualization‑Based Security (VBS) enclave allows a local attacker to read sensitive data that should remain protected. The flaw is classified as CWE‑822 and could reveal confidential system information or memory contents, potentially aiding further attacks.

Microsoft Windows 11 22H3, 23H2, 24H2, and 25H2 on arm64 and x64 architectures are affected. All builds from these release lines are vulnerable to the pointer dereference in the VBS enclave.

The vulnerability carries a moderate severity rating. Exploitation requires local execution or user privilege and is not feasible remotely. The likelihood of exploitation is considered low, and current security advisories do not flag it as an actively exploited vulnerability.