The vulnerability is an untrusted search path flaw in the Windows Storage component. When an attacker can place a malicious executable in a directory that the storage system searches before the legitimate component, the system will load the attacker’s file and execute it with elevated privileges. This flaw allows a local attacker with sufficient access to the file system to elevate privileges on the affected Windows machines, which can lead to full system compromise.

Affected products include Microsoft Windows 10 (Versions 1607, 1809, 21H2, 22H2), Microsoft Windows 11 (Versions 23H2, 24H2, 25H2, 26H1), and Microsoft Windows Server releases from 2012 through 2025, including Server Core installations and standard editions. All listed versions are vulnerable to the untrusted search path issue in Windows Storage.

The CVSS score of 7 indicates a medium severity level. With no EPSS score published and the vulnerability not listed in the CISA KEV catalog, the publicly available exploitation probability is uncertain, but the local nature of the attack means an insider or compromised user with file‑creation rights could potentially trigger the flaw. Because the flaw requires an authorized attacker who can place a file in a specific search path, exploitation would generally be limited to environments with insufficient isolation or overly permissive directory permissions.