The vulnerability is an out‑of‑bounds read in the Windows Overlay Filter component. This flaw can be triggered by a user with local privileges and permits the attacker to read memory outside the intended buffer and to execute code on the target machine. The impact is a local privilege escalation that can compromise the confidentiality, integrity, and availability of the affected system.

Affected products include Microsoft Windows 10 versions 1607, 1809, 21H2 and 22H2, Windows 11 versions 23H2, 24H2, 25H2, 26H2 and 26H1, as well as Windows Server 2012 (and R2), 2016, 2019, 2022 and 2025 in both full and core installations. All listed builds are impacted as defined by the CNA.

The CVSS score of 7.8 indicates high severity. The EPSS score is not available, so the likelihood of exploitation cannot be quantified here, but the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is local exploitation by a user who can run programs with sufficient privileges; remote exploitation is not documented in the description.