A race condition occurs in the Windows TCP/IP stack when multiple threads concurrently access a shared resource without proper synchronization. This flaw can be triggered by an authorized local attacker to elevate their privileges on the affected system. The vulnerability is a classic stack corruption type (CWE‑121) that permits escalation of privileges in a local context.

Microsoft Windows 10 versions 1607, 1809, 21H2, and 22H2; Windows 11 versions 23H2, 24H2, 25H2, and 26H1; as well as Windows Server 2016, 2019, 2022, 2025, and the 23H2 edition, including Server Core installations.

The CVSS score of 7.8 indicates a high severity local exploit. Because the EPSS score is < 1% and the vulnerability is not listed in CISA KEV, the current exploitation landscape is uncertain. The flaw is local, meaning the attacker must already have some level of access to the target system. Based on the description, it is inferred that the likely attack vector involves sending crafted network packets that influence the TCP/IP stack, but the exact details and required conditions are not explicitly documented. No publicly disclosed exploit exists, so the risk remains theoretical until a proof‑of‑concept or malicious code is observed.