The vulnerability resides in the Windows Bind Filter Driver, which improperly exposes files or directories to external parties. An attacker who has authorized local access can retrieve confidential data by exploiting this driver flaw, leading to a compromise of confidentiality. The weakness corresponds to CWE‑552, information exposure through disallowed file or directory access.

Affected products include Microsoft Windows 10 versions 21H2 and 22H2, Windows 11 versions 23H2 through 26H2 (covering both ARM64 and x64 architectures), Windows Server 2022, and Windows Server 2025 including Server Core installations. These encompass the latest 2023 to 2026 releases for both desktop and server platforms.

The CVSS score of 5.5 indicates a moderate severity for local information disclosure, while the EPSS score is not provided and the vulnerability is not listed in CISA KEV. The attack vector is inferred to be local; an attacker must already possess legitimate access to the affected machine. No remote exploitation conditions are mentioned, so the risk primarily applies to environments where users have elevated privileges or can load drivers.