The vulnerability is a heap‑based buffer overflow in the Windows Universal Disk Format File System Driver (UDFS). When an attacker with local authorized access triggers the overflow, the driver can write arbitrary data into a heap buffer, resulting in elevated privileges on the affected system. The flaw aligns with CWE‑122 and could allow the attacker to gain higher rights, potentially leading to full system compromise if the attacker is already on the machine or can load removable media.

The vulnerability exploits Microsoft Windows 10 (versions 1607, 1809, 21H2, 22H2), Microsoft Windows 11 (versions 23H2, 24H2, 25H2, 26H2, and 26H1 for ARM64, as well as 23H2 for ARM64), and Microsoft Windows Server 2012, 2012 R2, 2016, 2016 Server Core, 2019, 2019 Server Core, 2022, and 2025, including all server core installations. All listed builds of the UDFS driver across these operating systems are affected.

The CVSS score of 7.8 indicates high severity, while the EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. Exploitation is limited to local attackers with authorized access, likely by booting from or inserting a malicious UDFS‑formatted removable medium. The risk is therefore significant for systems that allow such local interactions, especially those that handle removable media regularly.