Microsoft’s Windows 11 MIDI Service Module contains an exposure that allows sensitive system information to be revealed to an attacker with local or authorized access. This flaw can lead to the disclosure of non‑public details about the operating system and potentially other privileged data. The weakness is categorized as an information‑exposure issue (CWE-497).

Affected Windows 11 editions include 24H2, 25H2, 26H1, and 26H2, for both ARM64 and x64 architectures as indicated by the vendor and CPE data.

The CVSS score of 5.5 describes moderate severity. With no EPSS score available, the likely exploitation probability in the wild is unknown. The vulnerability is not listed in CISA’s KEV catalog, but it requires local or authorized access, meaning a user with legitimate login credentials could exploit the service to read protected data. The absence of a remote exploitation vector reduces the attack surface but still presents a noteworthy risk for internal attackers or compromised accounts.