This vulnerability is an integer overflow or wraparound in the Windows Spaceport.sys driver that allows an attacker with local access to elevate their privileges on the affected system. The flaw stems from improper handling of boundary values, as classified by CWE-190 and CWE-20. If successfully exploited, a user with limited privileges could acquire higher rights—potentially administrative access—enabling unrestricted modification of system files, installation of malware, or other malicious actions.

The flaw affects Microsoft Windows 11 operating systems version 23H2, 24H2, 25H2, 26H2, and 26H1, as well as Microsoft Windows Server 2022 and Windows Server 2025 (both full and Server Core installations). These versions run on both x64 and ARM64 architectures where applicable.

The CVSS score of 7.8 indicates a high severity for local privilege escalation. The EPSS score is not available, but the vulnerability is not listed in the CISA KEV catalog, suggesting no widespread exploitation has been reported yet. Because the attack requires an authorized local user, the risk is confined to in‑organisational users or compromised accounts. The absence of a remote execution path reduces the overall threat surface compared to network‑based exploits.