The vulnerability is an out‑of‑bounds read in the Windows kernel that permits a local, authorized attacker to read protected memory. This may expose sensitive information by allowing the attacker to read data past a buffer boundary (CWE‑125).

The flaw affects multiple Microsoft Windows versions, including Windows 10 build 1607, 1809, 21H2, and 22H2; Windows 11 builds 23H2, 24H2, 25H2, 26H2, and 26H1; and Windows Server editions from 2012 through 2025, covering both full and Server Core installations.

The CVSS score of 4.7 indicates moderate severity, while the EPSS score of less than 1% suggests a very low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. The attack requires local authorization; the likely attack vector is an authenticated user executing malicious code that triggers the kernel read. This information is inferred from the description and not explicitly stated.