The vulnerability is a untrusted pointer dereference in the Windows kernel that allows an attacker to gain elevated privileges. This flaw could enable the attacker to impersonate an administrator or perform actions with system-level authority, potentially compromising the entire operating environment. The weakness is classified as CWE-822.

Microsoft Windows 11 version 26H1 on arm64 devices is affected. Only this specific edition and architecture are listed in the CNA data. No other operating system versions or architectures were identified.

The CVSS score of 6.8 indicates moderate severity. EPSS is not provided, and the vulnerability is not in the CISA KEV catalog, suggesting that widespread exploitation is not currently confirmed. Because the flaw requires a physical attack to abuse the untrusted pointer, the attack surface is limited to attackers with direct hardware access. Still, once physical access is obtained, gaining kernel privileges could lead to full system compromise.