The CVE describes an improper handling of insufficient permissions or privileges in Windows Enterprise App Management that could allow an authorized attacker to raise privileges locally. The weakness is characterized as improper privilege management (CWE‑280). The flaw would enable a user with at least modest access to the Enterprise App Management interface to gain higher privileges, potentially compromising confidential data, altering system configurations, or executing code with elevated rights. Based on the description, the likely attack vector appears to be local and requires the attacker to have some level of authorization to the Enterprise App Management service, an inference derived from the available information.

Affected products include Microsoft Windows 10 versions 1607, 1809, 21H2, and 22H2; Microsoft Windows 11 versions 23H2, 24H2, 25H2, and 26H1; and Microsoft Windows Server releases 2016, 2019, 2022, and 2025—including Server Core installations.

The CVSS score of 7.8 indicates a high severity local privilege escalation, while the EPSS score is not provided and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local, requiring the attacker to possess some authorized access to the Enterprise App Management interface. Although no public exploits have been reported, the potential for privileged escalation remains significant due to the nature of the weakness and the broad impact across multiple Windows releases.