The vulnerability is an untrusted pointer dereference in Microsoft Windows Sysinternals Process Monitor. A local attacker who already has authorized access can exploit the flaw to gain elevated privileges on the same machine. The flaw leverages improper validation of a pointer before dereference, allowing an attacker to execute code or alter system state at a higher privilege level. This is classified as CWE-822.

Microsoft Windows Sysinternals Process Monitor is the affected product. No specific version numbers are furnished by the CNA; however, the vulnerability applies to all currently deployed releases until an updated version is issued.

The CVSS v3.1 score of 7.1 indicates a high impact. The EPSS score is not available, so the current exploitation probability is uncertain, but the vulnerability is not reported in the CISA KEV catalog. The attack vector is local, requiring an authorized user; therefore, privileged or administrator accounts pose a higher risk.