Windows Storage implements a heap-based buffer overflow that can be triggered by an authorized local user. The flaw occurs when the system processes certain storage operations, allowing the attacker to overwrite critical memory structures. Successful exploitation results in local privilege escalation, giving the attacker administrative rights on the affected machine.

Microsoft Windows 10 version 1607, 1809, 21H2, and 22H2; Microsoft Windows 11 version 23H2, 24H2, 25H2, 26H2, and 26H1; Microsoft Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025 (including Server Core installations).

The CVSS score of 7 denotes a high impact level, but the EPSS score is not available, indicating that the current probability of exploitation is uncertain. The vulnerability is not listed in the CISA KEV catalog, suggesting no confirmed active exploitation. The likely attack vector is a local authorized attacker with user privileges attempting to trigger the buffer overflow through Windows Storage operations. Given the local nature of the attack and absence of known remote vectors, the risk is moderate to high for environments that permit local users to perform storage operations.