An attacker who can execute code with local privileges can access sensitive kernel system information. This flaw arises from improper validation in the Windows Win32 Kernel Subsystem that allows data leakage. The vulnerability is identified as CWE‑497.

Affected systems include recent Microsoft Windows 10 releases (1607, 1809, 21H2, 22H2) and Windows 11 releases (23H2, 24H2, 25H2, 26H2, 26H1) as well as Windows Server 2012 through Server 2025, in both full and core images. All listed product versions are vulnerable until updated to the patch that addresses CVE‑2026‑83774.

The CVSS score of 4.7 indicates moderate severity and the lack of an EPSS entry implies limited publicly known exploitation. It is listed as not in the CISA KEV, further suggesting low exploitation risk. The vulnerability requires local privilege—an authorized attacker on the machine—to read restricted kernel data, and does not allow remote code execution or broader compromise.