The vulnerability is an untrusted pointer dereference in Windows Distributed File System (DFS). An attacker can send crafted network traffic that causes the DFS service to dereference an untrusted pointer, allowing privilege escalation. The impact is that the attacker can raise the privileges of the DFS service, potentially giving them higher‑level access to the system and compromising confidentiality, integrity, and availability.

Microsoft Windows 10 versions 1607, 1809, 21H2, and 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1; Microsoft Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025, including both Server Core and full installations. Any of these systems running the DFS service are potentially vulnerable.

The CVSS score of 7.5 indicates a moderate‑to‑high severity, while the EPSS score is 1% and the vulnerability is not listed in the CISA KEV. The likely attack vector is via the DFS protocol over a network; an attacker must be able to communicate with the target’s DFS service. No public exploit has been reported, but the flaw could enable attackers to gain elevated privileges on the host.