The vulnerability is a use‑after‑free flaw in the Windows Storport Miniport Driver. It can be triggered by a specially crafted network packet that causes the driver to execute arbitrary code within the context of the driver, which typically runs with SYSTEM privileges. An attacker who succeeds would gain full control of the affected server, able to install malware, exfiltrate data, and pivot to other systems.

Microsoft Windows Server 2025 and Windows Server 2025 (Server Core installation) are affected. The vulnerable component is the Storport Miniport Driver included in the Windows operating system.

The CVSS base score of 8.8 classifies the flaw as high severity. The EPSS score is not available, and the flaw is not listed in CISA’s KEV catalog, indicating no widely known exploitation at the time of analysis. The attack vector is inferred to be remote, over the network, as the flaw is triggered by network traffic to the storage subsystem. While no public exploit is documented, the high impact and lack of mitigation means the risk to exposed servers is significant.