Container registry escape via VrpBuildKeyPath integer overflow

Windows Kernel in affected Windows 10, Windows 11, and Windows Server builds allows local users to read registry data outside a container. VrpBuildKeyPath stores calculated registry-path lengths in 16-bit values, allowing long virtualized paths to wrap and bypass container path scoping. A low-privilege local account inside a Windows Server container is required, and the demonstrated consequence is access to registry resources outside that container.