This vulnerability causes sensitive data to be written to a kernel‑mode driver log file, allowing an authorized local attacker to read confidential information. The flaw is a logging weakness that records privileged data, leading to a loss of confidentiality by exposing credentials, configuration details, or other device internals.

Affected systems include Microsoft Windows 10 versions 1607, 1809, 21H2, 22H2; Microsoft Windows 11 versions 23H2, 24H2, 25H2, 26H2, 26H1; and Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025, on both Server Core and full installations.

The CVSS score of 5.5 indicates moderate severity. The EPSS score is not available, so the exploitation probability is uncertain; the vulnerability is not listed in the CISA KEV catalog, suggesting no confirmed public exploits yet. Attackers require local, authorized access to trigger the excessive logging, making the threat mainly internal but still significant when privileged users can exploit the leaked data.