The flaw is an integer overflow or wraparound in the Windows Spaceport.sys kernel‑mode driver. When triggered, the driver can allow an attacker to gain elevated privileges on the host. The vulnerability is classified as CWE‑190. The description implies that exploitation could give an attacker control over the operating system; however, that level of impact is inferred from the potential for privilege escalation and not explicitly stated in the supplied text.

Affected systems include Windows 10 versions 1607, 1809, 21H2, and 22H2; Windows 11 versions 24H2, 25H2, and 26H1; as well as Windows Server editions 2012, 2012 R2, 2016, 2019, 2022, and 2025, including core installations. All listed versions contain the vulnerable Spaceport.sys component.

The CVSS score of 6.8 indicates a moderate severity. The EPSS score of less than 1 % shows a very low likelihood that this vulnerability is currently being exploited. The vulnerability is not listed in CISA’s KEV catalog. The attack vector is a physical attack on the device; therefore the threat is limited to environments where an adversary can obtain direct physical access to the hardware.