The vulnerability is a heap‑based buffer overflow in the Windows Universal Disk Format (UDFS) file system driver. An authorized attacker who can trigger the overflow can gain elevated local privileges, effectively escalating their access level on the target system. The flaw stems from improper bounds checking when handling certain buffer operations, allowing an attacker to overwrite critical memory structures.

Microsoft Windows 10 version 1607, 1809, 21H2, 22H2; Microsoft Windows 11 versions 23H2, 24H2, 25H2, 26H2, 23H2, 26H1; Microsoft Windows Server 2012, 2012 R2, 2016, 2019, 2022, 2025, including their Server Core installations.

The CVSS score of 7.8 indicates a high severity local privilege escalation vulnerability. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting it has not yet been widely exploited in the wild. Attackers would need authorized local access or the ability to write files to a media device that the system mounts via UDFS. Once exploited, the attacker can perform system‑level actions, including installing software, modifying configuration files, or exfiltrating data.