Windows Runtime contains an improper synchronization mechanism that creates a race condition when multiple shared resource concurrently. This flaw is classified as CWE‑362 and CWE‑416. An attacker can exploit the race condition to execute code with elevated privileges, effectively moving from a limited user context to a higher privilege level within the operating system.

Affected Windows operating systems include Windows 10 versions 1809, 21H2, and 22H2; Windows 11 versions 24H2, 25H2, and 26H1; and Windows Server 2019, 2022, and 2025, including their Server Core installations. The vulnerability applies across x86, x64, and arm64 architectures as listed in the CPE data.

The CVSS score of 7 indicates moderate to high severity, while the EPSS score of less than 1% implies a low but non flaw is not listed in the CISA KEV catalog. The likely attack vector is over a network, where an attacker must be able to interact with the vulnerable Windows Runtime component and trigger the race condition within the required timing constraints. Successful exploitation requires elevated privileges only once the race condition has been induced.