The vulnerability is an out‑of‑bounds read in the Windows Print Spooler Components that enables a locally authorized attacker to read memory in a way that can expose confidential data. The weakness is identified as CWE‑125, indicating a buffer under‑read condition. The local attacker could potentially retrieve sensitive information stored in the spooler’s memory space, although the extent of data is limited to what resides in that region of memory at the time of the read.

Microsoft Windows 10 versions 1607, 1809, 21H2 and 22H2; Microsoft Windows 11 versions 23H2, 24H2, 25H2, 26H2 and 26H1; Microsoft Windows Server 2012, 2012 R2, 2016, 2019, 2022 and 2025 (including both full and Server Core installations).

The CVSS score is 5.5, placing the vulnerability in the moderate severity range. EPSS information is not available, and the vulnerability is not listed in the CISA KEV catalog. Because exploitation requires a user with local authority, the risk is limited to systems where privileged users can initiate the operation. No known publicly available exploits have been reported, but the out‑of‑bounds read could allow disclosure of restricted data if an attacker gains sufficient local access.