A stack-based buffer overflow exists in the Windows Storage component that can be triggered by an attacker who already has authorized local access. When the overflow is exploited, the attacker can corrupt memory on the stack, leading to the execution of arbitrary code with higher privileges. This flaw provides the attacker the means to gain elevated administrative rights on the affected system, thereby compromising confidentiality, integrity, and availability. The weakness is classified as CWE‑121, a classic stack buffer overflow.

Microsoft Windows 10 versions 1809, 21H2, and 22H2; Microsoft Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1; Microsoft Windows Server 2019 (including Server Core installations), 2022, and 2025 (including Server Core installations).

The CVSS score of 7 indicates moderate to high risk. The EPSS score is not available; based on the description, it is inferred that the absence of an EPSS rating suggests a lower current exploitation likelihood compared to vulnerabilities with higher EPSS values. The flaw is local in nature—an attacker must be authorized to run code or perform actions on the target machine. Because the vulnerability is not listed in CISA KEV, it appears not to be actively exploited on a large scale. The overall risk remains significant for any system that has not yet applied the patch, as the same local access prerequisite does not change with system updates. Older or unpatched installations therefore present a greater attack surface for the described elevation of privileges.