The flaw is a race condition in the Windows USB Print Driver that allows an authorized local user to execute concurrent operations on a shared resource without proper synchronization. By carefully timing two print tasks, the attacker can trigger an improper state in the driver that results in privilege escalation. The vulnerability is classified as CWE-362 race condition and CWE-125 out‑of‑bounds read, but the description does not provide evidence of an out‑of‑bounds read occurring. The primary consequence is that a user with local rights can gain higher privileges on the affected system.

Microsoft Windows 11 versions 24H2, 25H2, 26H1 and Microsoft Windows Server 2025, including Server Core installations, are affected. The flaw is present in the USB print service across both ARM64 and x64 architectures as indicated by the CPE strings.

The CVSS score of 7 denotes high severity, while the EPSS score of less than 1% indicates a low probability of exploitation in the wild. The vulnerability is not listed in CISA’s KEV catalog. Exploitation requires a local, authenticated user, who must orchestrate a precisely timed sequence of print operations to trigger the race condition. The attack surface is limited to systems that use the vulnerable USB print driver and have remote or local administrative access.