An out‑of‑bounds read flaw in the Windows Partition Management Driver allows an attacker who already has local user privileges to elevate to higher powers. The vulnerability, a classic CWE‑125 issue, lets the attacker read memory beyond the intended buffer, potentially corrupting the driver’s execution flow or leaking sensitive data. If exploited, the attacker can gain administrative rights on the affected machine, enabling full control over the system, installation of malware, and persistence.

The flaw affects Microsoft Windows operating systems, including Windows 10 from version 1607 through 22H2, Windows 11 from 23H2 through 26H2 (including arm64 and x64 platforms), and Windows Server from 2012 through 2025. No specific firmware or patch version numbers are supplied, so any instance of the listed operating systems remains at risk until a vendor update is applied.

The CVSS score of 7.8 places this vulnerability in the high severity range, and without an EPSS rating the exact exploitation probability is unknown, but the lack of a KEV listing does not diminish the risk to users who are actively employing these systems. The attack requires local access and a level of authorization sufficient to invoke partition management functions; thus, the vector is most likely a local privilege escalation scenario rather than a remote attack. Systems without the pending patch remain vulnerable to attackers who can execute arbitrary code with elevated privileges.