A flaw in the Windows Installer component triggers an out‑of‑bounds read, enabling an attacker with local access to read sensitive memory locations and disclose confidential data. The weakness is classified as CWE‑125 (Buffer Under-read).

Microsoft Windows 10 versions 1607, 1809, 21H2, and 22H2; Microsoft Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1; Microsoft Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025—including Server Core installations.

The vulnerability carries a CVSS score of 5.5, indicating a moderate severity. EPSS data is not available, suggesting limited publicly reported exploitation. The vulnerability is not listed in the CISA KEV catalog, further indicating low exploit prevalence. The attack requires local privileged access to the affected system; a local authorized user can exploit the Windows Installer to extract protected information. Effective use of the patch eliminates this information disclosure path.