The vulnerability is an uninitialized resource within Windows Event Logging Service that permits a local attacker to expose sensitive data contained in event logs. Based on the description, it is inferred that the flaw is a type of accidental data exposure (CWE‑908) where garbage values can be read, compromising the confidentiality of system activity records for users who can invoke the service.

Microsoft Windows 10 versions 1607, 1809, 21H2, 22H2; Microsoft Windows 11 versions 23H2, 24H2, 25H2, 26H2, 26H1; and Microsoft Windows Server 2012 (including Server Core), 2012 R2, 2016, 2019, 2022, 2025 (standard and Server Core installations).

The CVSS score of 5.5 indicates a moderate severity local vulnerability that can be exploited by an authenticated user. The EPSS score < 1% signals a very low but nonzero probability that exploitation will occur, and the vulnerability is not listed in the CISA KEV catalog. Attackers would need local or administrative access to trigger the uninitialized resource and read exposed log entries; the exploitation poses confidentiality risks but does not compromise system integrity or availability.