This vulnerability allows a local attacker with authorized access to the Windows operating system to read sensitive system information that should remain protected in the kernel. The flaw is identified as a CWE‑497 weakness, where improper control can inadvertently expose private data, potentially revealing configuration details, memory contents, or other sensitive information that could aid further attacks.

Microsoft Windows 10 from version 1607 through 22H2, Microsoft Windows 11 from version 23H2 through 26H2 on x64 and arm64, Microsoft Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025 including server core installations, all of which are listed as affected in the vendor data.

The CVSS score of 5.5 indicates moderate severity, while the lack of an EPSS score and non‑listing in the CISA KEV catalog suggest that wide‑scale exploitation has not been documented. Attackers would need local authorized privileges; exploitation does not appear to be possible remotely. The risk is therefore moderate for systems with privileged local users and high for environments where local privileged access is poorly controlled.