The vulnerability is a heap-based buffer overflow in the Windows Virtualization-Based Security enclave. An attacker who already has authorized local access can exploit the out‑of‑bounds write to gain elevated privileges, potentially allowing the execution of arbitrary code at a higher privilege level. The weakness is classified as CWE‑122, which indicates an out‑of‑bounds write in a heap buffer.

Affected products include Microsoft Windows 11 version 24H2, 25H2, 26H2, and 26H1, as well as Windows Server 2025 and its Server Core installation. The impact applies to both standard and arm64-based systems and is limited to the specific Windows releases listed above.

The CVSS score of 7.8 reflects a high severity but the exploit probability is not listed in the EPSS database, and the vulnerability is not catalogued in the CISA KEV list. The attack vector appears to be local, requiring an attacker to already have authorized access. The risk is moderate to high for environments where users have elevated privileges or the VBS enclave is enabled.