The Windows WLAN Service contains an out‑of‑bounds read (CWE‑125) that lets an authorized local attacker read memory that should be protected. An attacker who has valid credentials on the target machine can expose sensitive information, such as credential hashes or network configuration data. The flaw does not allow remote code execution; it is limited to local information disclosure.

Affected products include Microsoft Windows 10 (versions 1607, 1809, 21H2, 22H2) and Windows 11 (versions 23H2, 24H2, 25H2, 26H2, 26H1). Windows Server editions from 2012 through 2025, including the Server Core variants, are also impacted. These systems run the WLAN Service and remain vulnerable until the latest update is applied.

The CVSS score of 5.5 indicates moderate severity and the EPSS score is not available. The vulnerability is not listed in CISA’s KEV catalog. Exploitation requires local access and valid user privileges; it does not provide network‑based or remote exploitation. Despite the moderate score, it is advisable to mitigate early because the read can expose proprietary data that may be sensitive if accessed by an insider.