Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose sensitive information over a network. The vulnerability is a classic buffer over-read (CWE‑125) that can expose memory contents that should remain private. This information leakage could lead to the compromise of credentials, configuration data, or other secrets present in the affected systems' memory space, thereby undermining confidentiality. There is no indication that the vulnerability leads to code execution, privilege escalation, or denial of service, but the disclosed data could be leveraged in a larger attack chain.

The flaw affects a wide range of Microsoft Windows operating systems, including Windows 10 versions 1607, 1809, 21H2, and 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, 23H2 (arm64), and 26H1 (arm64); as well as Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025—both full and Server Core installations. All affected builds include the NFS client component that is responsible for the exposed read operation, regardless of architecture (x86, x64, arm64).

The CVSS score of 6.5 indicates a medium severity vulnerability. The EPSS score is not available, but the lack of public exploits and absence from CISA's KEV catalog suggest that the likelihood of widespread exploitation is low at present. Inferred from the description, the attacker must be able to interact with the NFS client over a network; however, no explicit authentication or privilege is required, implying a local or network-based threat actor could discover and exploit the read. The risk remains that any sensitive information persisted in memory can be captured, potentially aiding further attacks, though the absence of a broader impact such as denial of service mitigates the overall threat level.