The vulnerability allows an authorized local attacker with administrative privileges to obtain sensitive system information from Windows Secure Kernel Mode. By exposing data that should remain confined within the kernel, an attacker could gain confidential information that could lead to privilege escalation or further attacks. The weakness represented by CWE‑497 describes a flaw that permits data leakage in contexts where confidentiality must be preserved. The problem is limited to local systems; no remote exploitation is described.

Affected operating systems include Microsoft Windows 10 versions 1607, 1809, 21H2, and 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, 26H1, and 23H2; and Windows Server 2016, 2019, 2022, and 2025 (including server core installations).

With a CVSS score of 5.6 this issue is considered a medium‑severity information disclosure. The EPSS score is not available, so the precise likelihood of exploitation is unclear, but the lack of a KEV listing indicates no known large‑scale exploit. The likely attack vector is local; an attacker must have legitimate local access, typically through a local account with administrator rights, to exploit the flaw.