The vulnerability is an untrusted pointer dereference in the Windows Storage Port Driver that permits an attacker with physical access to elevate privileges. This flaw is a CWE-822 (untrusted pointer dereference). The flaw allows the attacker to manipulate internal driver data structures, potentially granting local administrative rights. Based on the description, it is inferred that any process running with elevated privileges could subsequently assume the identity of an administrator, compromising confidentiality, integrity, and availability of the system.

Affected products include Microsoft Windows 10 versions 1607, 1809, 21H2, and 22H2; Microsoft Windows 11 versions 23H2, 24H2, 25H2, 26H2, 26H1; and Microsoft Windows Server editions 2012, 2012 R2, 2016, 2019, 2022, and 2025, including Server Core installations. These releases are impacted across both x86 and x64 architectures as well as ARM64 where documented.

The CVSS score of 6.8 indicates moderate severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting limited or unknown exploitation activity. The documented attack requires physical tampering with the storage port or related hardware, limiting the threat to environments where an attacker can access the device. However, once privileged, the attacker can exercise full control over the compromised system.