The vulnerability is a buffer over-read in the Windows kernel that can be triggered by an authorized local user. When exploited, the attacker can read contents of the kernel memory that are normally protected, potentially revealing sensitive data such as credentials, encryption keys, or other confidential information. Based on the description, the likely attack vector is a local, authenticated user.

Affected systems include Microsoft Windows 10 releases 1607, 1809, 21H2, and 22H2; Microsoft Windows 11 releases 23H2, 24H2, 25H2, and 26H1; as well as Microsoft Windows Server releases 2016, 2019, 2022, 2025, and the 23H2 edition, including Server Core installations.

The CVSS score of 6.1 indicates medium severity. Because the vulnerability requires local, authenticated access, it does not pose a remote attack risk. The EPSS score of 2% and the absence from the CISA KEV catalog suggest that widespread exploitation has not been observed. Nevertheless, local privileged users could expose confidential data if the kernel memory contains sensitive structures.