An out‑of‑bounds read in the Spaceport.sys kernel‑mode driver permits an attacker who already has local access to gain higher privileges on the system. The flaw triggers a CWE‑125 exploitation path where an insufficient bounds check allows the driver to read memory beyond an allocated buffer, potentially corrupting state or leaking confidential data and enabling privilege escalation.

Microsoft Windows 10 versions 1607, 1809, 21H2, 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, 26H1, 23H2; Windows Server 2012, 2012 R2, 2016, 2019, 2022, 2025, including all supported architectures and core installations.

The vulnerability scores 7.8 on CVSS, indicating high severity, but the EPSS score is not available and the flaw is not listed in the CISA KEV catalog. Exploitation requires a local authenticated user with the ability to load or interact with the Spaceport.sys driver. While no public exploits have been reported, an attacker who can achieve local execution can elevate privileges, giving full control over the affected machine.