An unauthorized control sphere can view sensitive kernel data, allowing a local attacker to reveal confidential system information. The vulnerability stems from improper access controls in the Windows kernel, classified as CWE-497. While the flaw does not grant modification rights, the disclosed data could foster further attacks or compromise system integrity.

Windows 10 versions 1607, 1809, 21H2, and 22H2 and Windows 11 versions 23H2, 24H2, 25H2, 26H2, 26H1, and 23H2, as well as Windows Server 2012 through 2025 (including their server core editions) are affected.

The CVSS score of 5.5 indicates a moderate severity. Because exploitation requires local privilege or execution of code with kernel integrity privileges, the risk is limited to systems with compromised local users. No exploitation evidence is reported and the vulnerability is not in the CISA KEV catalog. The EPSS score is unavailable, but the lack of public exploits and moderate CVSS suggest a low to moderate likelihood of attack.