The updated description details an out‑of‑bounds read in the Windows Projected File System Filter Driver that permits an authorized local attacker to elevate privileges, identified as CWE‑125. This still represents a local privilege escalation capable of compromising confidentiality, integrity, and availability.

Microsoft Windows 10 versions 1809, 21H2 and 22H2, Microsoft Windows 11 versions 23H2, 24H2, 25H2 and 26H1, and Microsoft Windows Server editions 2019, 2022 and 2025—including Server Core installations—are affected. These versions were listed as vulnerable by Microsoft’s CNA. No other vendors or products are presently affected.

The CVSS score of 7.8 reflects a moderate to high risk, while the EPSS score is less than 1%, so the exploitation likelihood is low but not negligible. The vulnerability is not listed in CISA’s KEV catalog, suggesting no publicly known exploits yet. The inferred attack vector is local and requires an authorized user on the machine; if an attacker already has some local privilege, the over‑read can raise that privilege further, enabling broader system compromise or persistence.