This vulnerability, identified as CWE-532, involves the insertion of sensitive kernel memory information into log files in Windows 10 Version 1507. The issue allows local attackers with low privileges to gain read access to sensitive kernel memory information through log files. The CVSS 3.1 base score is 5.5 (medium), with attack vector local, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability. Microsoft has released an official fix for this vulnerability.

The vulnerability allows local attackers to obtain sensitive kernel memory information by accessing log files where such information is improperly recorded. This could lead to information disclosure that compromises confidentiality. There is no impact on system integrity or availability. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21320 to remediate this vulnerability.