Local information disclosure via out-of-bounds read

Out-of-bounds read in Microsoft Windows Defender Firewall Service allows local users to disclose information from affected Windows builds. The service reads beyond an allocated buffer, but Microsoft has not disclosed the responsible interface, data structure, or attacker-controlled input. Exploitation requires local low-privileged access and no user interaction; the published impact is limited to reading information, with no integrity or availability effect.