Technical impact
Based on the description, it is inferred that a race condition in Windows Runtime's handling of a shared resource permits a local, authenticated attacker to trigger concurrent execution flaws. By exploiting improper synchronization, the attacker can gain elevated privileges on the host system, effectively taking full control of that machine.
Affected Systems
The flaw affects Microsoft Windows 11 releases 24H2, 25H2, 26H1 and Microsoft Windows Server 2025, including Server Core installations, across both ARM64 and x64 builds as documented by the supplied CPE identifiers.
Risk and Exploitability
Based on the description, it is inferred that the attack vector is strictly local, requiring an authorized user to initiate the race condition. With a CVSS score of 8.8 the vulnerability is rated high severity, while an EPSS score of less than 1% indicates a very low likelihood of exploitation in the wild. Once triggered, the attacker can execute code, install software, alter system configuration, or establish persistence with full system privileges. The issue is not currently listed in CISA's KEV catalog, but the high severity warrants immediate action.
