Local information disclosure via out-of-bounds read

Information disclosure in Microsoft Windows EFS allows local users to read sensitive memory via a local out-of-bounds read. Microsoft has disclosed only that Windows Encrypting File System reads past an intended buffer boundary; the vulnerable code path and the specific untrusted input that triggers the over-read remain undisclosed in public records. Exploitation requires local authenticated access with low privileges and exposes confidentiality impact only, with no published evidence of code execution, data modification, or in-the-wild exploitation in the reviewed sources.