This vulnerability (CVE-2025-21272) affects Microsoft Windows 10 Version 1507 (build 10.0.10240.0) and is categorized under CWE-908 (Use of Uninitialized Resource). It involves a Windows COM server that improperly handles resources, potentially allowing information disclosure. The CVSS 3.1 vector indicates the attack requires local access with low complexity and privileges, no user interaction, and impacts confidentiality with a high impact rating. Microsoft has published an official fix for this vulnerability.

Successful exploitation of this vulnerability could lead to disclosure of sensitive information due to the use of uninitialized resources in the Windows COM server. The confidentiality impact is high, but integrity and availability are not affected. The attack requires local access and low privileges, limiting remote exploitation potential.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1507 to remediate this vulnerability. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21272 for detailed patch information and deployment guidance.