An attacker with privilege on a Windows installation can use the ALPC interface to read sensitive system information that should be hidden from unauthorized control spheres. The flaw is identified as CWE‑497, exposing data that may reveal configuration details and other internal information, potentially aiding further compromise. The impact is limited to local disclosure and does not allow remote access or code execution.

The flaw affects multiple Windows releases. It is present in Windows 10 versions 1809, 21H2, and 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1; as well as Windows Server 2019, 2022, and 2025. All standard x86, x64, and arm64 editions listed in the CNA vendor/product list are impacted. The latest build numbers for each release contain the corresponding update that mitigates the issue.

The CVSS score of 4.7 indicates moderate severity; the vulnerability is local only, requiring the attacker to already have access to the target machine. Because no EPSS score is available and the flaw is not in the CISA KEV catalog, the likelihood of exploitation in the wild is low, though not impossible for an adversary who has local foothold. An attacker would need to exploit the ALPC interface to read the protected data, but the attack path is straightforward once local access is achieved, making the vulnerability a moderate risk for systems not patched.