Concurrent execution using a shared kernel resource with insufficient synchronization creates a race condition in the Windows TCP/IP stack. When an authorized local user invokes network operations simultaneously, the flaw can be triggered to gain higher privileges. The weakness is defined as CWE‑362. The attack enables a local attacker to elevate privileges on the affected Windows system, potentially allowing full system compromise.

Microsoft Windows 10 releases 1607 through 22H2, Windows 11 builds 23H2, 24H2, 25H2, and 26H1, as well as Windows Server editions 2012, 2012 R2, 2016, 2019, 2022, and 2025 (including core installations) are affected. The vulnerability spans both 32‑bit and 64‑bit hosts, as well as ARM‑based Windows 11 devices.

The CVSS score of 7.0 indicates moderate‑to‑high severity, but the EPSS score of < 1% indicates that exploitation probability is very low. The vulnerability is not listed in CISA’s KEV catalog, suggesting no publicly known exploit. Based on the description, it is inferred that the attack vector is local, requiring an authorized user or injection of malicious network traffic from a local process. Once triggered, the attacker can raise their privilege level, leading to unauthorized access to system resources. Organizations should treat this as a priority patching issue.