The vulnerability is a buffer over-read in Windows Encrypting File System that can be triggered by an authorized local user, leading to disclosure of sensitive data contained in EFS‑protected files. It represents a confidentiality breach and follows CWE‑126 – Buffer Copy without Checking Size of Destination Buffer.

The flaw affects Microsoft Windows 10 editions 1607, 1809, 21H2, and 22H2, Windows 11 editions 23H2, 24H2, 25H2, 26H2, and 26H1, and Windows Server editions 2016, 2019, 2022, and 2025. All listed builds expose the same local, authorized‑user information‑disclosure risk.

The CVSS score is 5.5, indicating moderate severity, and the EPSS score is unavailable. The exploit is limited to local, authorized users; no remote or elevation aspects are documented. The vulnerability is not listed in the CISA KEV catalog, but any system running a vulnerable Windows or Windows Server version should deploy the fix promptly.