The CVE identifies a vulnerability in the Windows TCP/IP stack that can cause a denial of service. The description states only that the flaw could trigger a loss of availability for the affected host, but a detailed mechanism of exploitation is not disclosed in the available data.

Windows operating systems impacted by the vulnerability include Windows 10 builds 1607, 1809, 21H2, and 22H2; Windows 11 builds 23H2, 24H2, 25H2, 26H1, and the 2025 edition; and the Windows Server family ranging from 2012 (standard and Server Core) through 2025, including the 23H2 Server Core edition. All of the listed builds are affected when the network interfaces can be accessed from an external or adjacent network.

The CVSS score of 7.4 classifies the vulnerability as high severity. The EPSS score, less than 1%, suggests a low probability of exploitation and the vulnerability is not listed in the CISA KEV catalog, indicating no publicly known exploits. Based on the nature of the TCP/IP stack flaw, the attack vector is inferred to be through network traffic sent to the vulnerable host, and authentication is not required. A successful exploitation would crash the network stack, causing a system reboot or kernel panic and rendering the host unavailable until patched.