An out‑of‑bounds read in the Windows NFS client allows an attacker who can initiate a network connection to the vulnerable system to read memory that should not be exposed, thereby leaking potentially sensitive information. The vulnerability is classified as a classic memory corruption flaw and is reflected in CWE‑125. The impact is the disclosure of confidential data, which can be used to facilitate further attacks via credential exposure or to map system internals.

The flaw affects multiple Microsoft Windows releases including Windows 10 versions 1607, 1809, 21H2, 22H2, Windows 11 versions 23H2, 24H2, 25H2, 26H2, 26H1, as well as Windows Server 2012, 2012 R2, 2016, 2019, 2022 and 2025, both standard and server‑core installations. Any machine with Windows NFS client enabled is potentially exposed.

The CVSS score of 6.5 indicates a moderate severity and the EPSS score is not available, so the likelihood of exploitation cannot be quantified. This vulnerability is not listed in the CISA KEV catalog, suggesting that known exploit code has not yet been observed in the wild. The only required condition to exploit the flaw is the ability to connect to the vulnerable NFS client over the network, so if the client is reachable from an attacker’s network segment, the risk is real, albeit moderate. The flaw does not require local or administrative privileges, making it attractive to attackers who can remote‑connect to the target.