Concurrent execution using shared resources with improper synchronization (a race condition) in the Printer Association Object gives an authorized attacker the ability to elevate privileges locally. This flaw arises from incorrect handling of shared resources and is classified as a race condition. The direct consequence is that the attacker can raise their privileges on the affected Windows installations.

The flaw affects Microsoft Windows 11 24H2, Windows 11 25H2, Windows Server 2022 23H2 (Server Core), and Windows Server 2025 (Server Core). Both 64‑bit and ARM64 builds are vulnerable as indicated by the enumerated CPEs.

The CVSS score of 7 indicates moderate severity, while the EPSS score below 1% signals a very low likelihood of widespread exploitation as of current data. The vulnerability is not listed in the Known Exploited Vulnerabilities catalog. Based on the description, it is inferred that the attack vector is local and requires an authorized attacker to initiate operations that access the Printer Association Object. The potential impact is the compromise of local system integrity due to privilege escalation.