This vulnerability involves exposure of sensitive information within Intel(R) PROSet/Wireless WiFi Software for Windows device drivers operating in Ring 2. It allows an unprivileged, unauthenticated local attacker to escalate privileges and potentially execute code locally without user interaction. The attack complexity is low and does not require special internal knowledge or user involvement. The CVSS 4.0 base score is 6.3, reflecting a medium severity with local attack vector, low complexity, no privileges required, no user interaction, and impacts mainly confidentiality with some limited integrity and availability effects.

The vulnerability may lead to unauthorized disclosure of sensitive information, enabling escalation of privilege and local code execution. The confidentiality impact is high at the system level, while integrity and availability impacts are low or none. There is no indication of remote exploitation or widespread active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or remediation level has been published by the vendor at this time. Until a patch is available, restrict local access to trusted users only and monitor for unusual local activity related to the affected software.