The vulnerability is an out‑of‑bounds read in the Windows Remote POS Driver that permits an attacker with local authorization to read sensitive data from memory. The flaw does not grant code execution or remote access; it only allows disclosure of confidential or privileged information to the attacker’s user account.

Affected systems include Windows 10 versions 1607, 1809, 21H2, and 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1; and Windows Server 2016, 2019, 2022, and 2025, including their core installations.

The CVSS score of 5.5 places the flaw in the moderate severity range, and the EPSS score of less than 1% indicates a low probability of exploitation. The flaw is not listed in the CISA KEV catalog. Because the attack requires local and authorized privileges, the primary vector is an enabled or installed Windows Remote POS Driver that can be accessed by a local user. An attacker could leverage the out‑of‑bounds read to exfiltrate data from memory, potentially compromising sensitive information stored by the system or other locally running applications.