An out‑of‑bounds read is present in the Windows Desktop Window Manager (DWM) Core Library, enabling a local attacker with authorized access to read memory regions that the core should not access. The data read may include confidential information such as user credentials, encryption keys, or other sensitive data that the attacker can access while the operating system is running.

This vulnerability affects Windows 10 versions 1607, 1809, 21H2, and 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1; and Windows Server versions 2012 R2, 2016, 2019, 2022, and 2025 in both full and Server Core installations.

The CVSS score is 5.5, indicating moderate severity. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, suggesting no documented public exploitation. The attack vector is local and requires the attacker to already possess authorized access to the target machine. By influencing the DWM process, an attacker can trigger the out‑of‑bounds read to obtain sensitive memory contents.