The vulnerability resides in Windows License Manager and allows an attacker with legitimate local access to read sensitive system information that should be protected from unauthorized control spheres. This exposure enables the disclosure of data that may be valuable to an attacker, entering the flow of class CWE‑497 weaknesses and limiting the impact to information confidentiality only. The flaw does not allow privilege escalation or execution of arbitrary code, but it does create a valuable data leak within the compromised local environment.

Affected by the vulnerability are Microsoft Windows 10 releases 1809, 21H2, and 22H2; Windows 11 releases 23H2, 24H2, 25H2, and 26H1; as well as Windows Server 2019 (including Server Core), Windows Server 2022, and Windows Server 2025 (including Server Core). All listed editions support the affected architecture variants noted in the product data.

With a CVSS score of 5.5 the issue is considered a moderate severity flaw. There is no EPSS score provided, indicating that no publicly available exploitation data exists or that the probability is unknown. The vulnerability is not listed in the CISA KEV catalog. The required attacker capability is local authorized access, meaning that the threat is limited to threats that can already log on to the affected system. The exploitation path is straightforward: an attacker with sufficient local privileges can invoke the License Manager interface and retrieve sensitive information. Because it is a local privilege‑only flaw, organizations with strict local privilege controls and regular patching will see the risk lowered.