An out‑of‑bounds read in Windows Print Spooler components allows an unauthorized attacker to read sensitive data in memory. The disclosure occurs when the spooler processes data received over a network connection, giving the attacker access to system information and potentially other in‑process data. This vulnerability does not enable code execution but provides privacy and integrity risks.

Microsoft Windows 10 versions 1607, 1809, 21H2, and 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, 23H2, 26H1; Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025 including Server Core installations. The affected components are the Windows Print Spooler services on both x86 and x64 architectures, and on arm64‑based Windows 11 systems.

The CVSS score is 6.5, indicating moderate severity. No EPSS score is available, which suggests insufficient data to estimate exploitation probability, but the lack of a KEV listing does not mean the vulnerability is harmless. The likely attack vector is remote, requiring an attacker to reach the Print Spooler service via the network, such as by spoofing a client or sending crafted packets to port 9100 or the SMB port that the spooler listens on. The vulnerability is exploitable from a remote host without requiring authentication, making it a low‑barrier information‑disclosure threat for networks that expose Print Spooler services.