The vulnerability is an out-of-bounds read in the Windows Network File System component. This flaw allows an attacker who has authorized local access to read memory locations beyond intended bounds, thereby disclosing sensitive data stored on the system. The weakness corresponds to CWE‑125, which involves reading memory past the end of a buffer.

Microsoft Windows Server products are impacted, including Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025, in both normal and Server Core installations. All listed editions are affected for the specified versions.

The CVSS score of 5.5 indicates medium severity, and no EPSS value is provided, so the exact likelihood of exploitation is unknown. The vulnerability is not currently listed in the CISA KEV catalog. Exploitation requires an authorized local user to access the affected SMB services, so the attack surface is limited to those who can log into or interact with the server over the network. If such access is gained, the attacker can read arbitrary data that may include credentials, personal information, or other confidential information.