A heap-based buffer overflow in the Windows Client for NFS allows a local attacker who already has system access to the affected machine to gain elevated privileges. The flaw occurs when untrusted input is processed by the NFS component, potentially enabling arbitrary code execution with higher privileges. The vulnerability is a classic example of CWE-122 and directly impacts confidentiality, integrity, and availability of the system by turning a low-privileged user into a higher-privileged one.

Microsoft Windows 10 versions 1607, 1809, 21H2, and 22H2, Windows 11 versions 23H2, 24H2, 25H2, and 26H2, and Windows Server editions 2012, 2012 R2, 2016, 2019, 2022, and 2025. Only the Windows Client for NFS component is impacted; the list above reflects all known affected builds.

The CVSS v3.1 score is 7.8, indicating high severity. EPSS is not available, and the vulnerability is not listed in CISA's KEV catalog. The attack vector is local and requires an authorized user with the ability to run code on the host. Exfiltration or remote impact is not possible; the flaw provides a mechanism for privilege escalation to system or administrator rights. Due to the lack of an exploit probability metric, defenders should treat it as a high-risk local privilege escalation where the user can execute arbitrary code.