The vulnerability allows a local, authorized attacker to access sensitive system information through the Windows iSCSI stack. The flaw discloses data that should remain confidential, leading to the potential exposure of critical system information. It is classified as CWE‑497, an information‑disclosure weakness that occurs when data is exposed through an authentication or privilege boundary.

Microsoft Windows 10 versions 1607, 1809, 21H2, and 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H1, and 26H2 for both x64 and ARM64 builds. Windows Server editions 2012, 2012 R2, 2016, 2019, 2022, and 2025, along with their Server Core installations, are also affected.

The CVSS score of 5.5 indicates medium severity. EPSS is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting no widespread exploitation has been reported. The likely attack surface is local, as an attacker must already have authorized access to the same host; no remote or privilege escalation vector is documented. With local privileges, the attacker can read system data that should be protected, potentially enabling further attacks that rely on that information. The overall risk is moderate, with the probability of exploitation uncertain due to the missing EPSS metric.