Microsoft Trace Data Helper is vulnerable to information disclosure, allowing an attacker who has authorized local access to reveal sensitive system data. The flaw stems from an improper handling of trace data, which can be accessed by constructs that should be restricted. This yields a moderate confidentiality impact consistent with CWE‑497, exposing details that could aid further local exploitation.

Affected Microsoft products include Windows 10 versions 1607, 1809, 21H2, and 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, 23H2, and 26H1; as well as Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025, across both client and server editions and including both x86/x64 and ARM64 architectures. The vulnerability impacts all listed releases without additional sub‑version qualifiers.

The CVSS score of 5.5 reflects moderate risk, with exploitation requiring local, authorized privileges—an attacker needs to be able to run code within the user account context that can access the Trace Data Helper. The EPSS score is not available, so current predicted exploitation likelihood is unknown, and the vulnerability is not listed in the CISA KEV catalog. Therefore, while not a high‑severity attack vector, the information disclosure can aid further local attacks and should be mitigated promptly.