The flaw lies in the Windows kernel’s handling of sensitive data that is inadvertently written into a log file, which a privileged user can read locally. This insecure logging practice is classified as CWE-532 and results in a local confidentiality breach, allowing the attacker to recover data that should remain hidden. The vulnerability does not provide remote access or privilege escalation, but it compromises sensitive information on the affected host.

The issue affects Microsoft Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 Version 24H2, Windows 11 Version 25H2, Windows 11 Version 26H1, Windows Server 2022, Windows Server 2025, and the Server Core installation of Windows Server 2025.

The CVSS score of 5.5 indicates moderate severity, while an EPSS value of less than 1% suggests a very low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog, so no known widespread attacks are reported. Based on the description, the likely attack vector is a local, authorized attacker who can read kernel log files; no remote exploitation path is mentioned and the impact is confined to information disclosure rather than system compromise.