The vulnerability is a race condition caused by improper synchronization of a shared resource in Windows Management Services. When multiple threads access the resource concurrently, an authorized local user can exploit the timing gap to gain higher privileges on the system.

Microsoft Windows 10 (versions 1809, 21H2, 22H2), Microsoft Windows 11 (versions 22H3, 23H2, 24H2, 25H2), Microsoft Windows Server 2019, 2022, and 2025, including Server Core installations on those editions.

The CVSS score is 7.8, indicating high severity. EPSS indicates a very low probability of exploitation (< 1 %) and the vulnerability is not currently listed in the CISA Known Exploited Vulnerabilities catalog. The likely attack vector is a local attacker with sufficient privileges to invoke Windows Management Services, making immediate patching essential to prevent a local privilege escalation.