The vulnerability is a missing authorization check in Windows AppX Deployment Extensions that permits a user with local, authenticated privileges to gain higher privileges on the affected system. This flaw can allow, for example, a regular user account to install or modify components that normally require elevated rights, thereby potentially compromising the confidentiality, integrity, or availability of the system.

Microsoft Windows 10 21H2 and 22H2, Windows 11 23H2, 24H2, 25H2, 26H2, Windows 11 26H1, and Windows Server 2022 and 2025 (including Server Core installations).

The CVSS score of 8.8 indicates high severity, and the EPSS score is below 1%, indicating a very low exploitation probability; the lack of KEV listing does not mitigate the risk. The flaw is exploitable only by users who already have local access; an attacker would need to initiate the AppX Deployment Extension or a similar privileged process. Once the exploit is executed, the attacker can elevate privileges on the host, leading to full system compromise.