This vulnerability allows an attacker with local access to read sensitive information stored in the Windows kernel, exposing system internals such as configuration data and potentially privileged credentials. The flaw is an information‑exposure weakness referenced as CWE‑497.

Affected products include Microsoft Windows 10 versions 1607, 1809, 21H2, 22H2; Windows 11 versions 24H2, 25H2, 26H1; and Windows Server 2012, 2012 R2, 2016, 2019, 2022, 2025, both full and Server Core installations. All enumerated builds are impacted by this kernel information‑disclosure flaw.

The CVSS score of 6.2 indicates moderate severity. The EPSS score is below 1 percent, meaning exploitation attempts are considered rare. The flaw is not part of the CISA KEV catalog. Based on the description, the likely attack vector is local execution. Exploitation requires local action by an unauthorized attacker, so restricting local privileged access can mitigate risk. No evidence of widespread exploitation is reported at this time.