An integer overflow or wraparound flaw in Windows PowerShell permits an attacker with authorized local access to execute arbitrary code. The vulnerability stems from improper bounds checking on input data, leading to a buffer manipulation that can be exploited to run native code in the context of the authenticated user. This creates a local code execution risk, potentially enabling further malicious activity such as privilege escalation, data theft, or persistence on the affected system.

Microsoft Windows 11 23H2, 24H2, 25H2, 26H2, and 26H1; Windows Server 2022; Windows Server 2025, including Server Core installation. These build numbers encompass recent Windows 11 and Server releases across x64 and ARM64 architectures.

The vulnerability has a CVSS score of 7.8, indicating a high severity level. The EPSS score is not available, so the likelihood of exploitation in the current environment is unknown. It is not listed as a known exploited vulnerability by CISA. The attack requires local or authorized credentials and direct interaction with the vulnerable PowerShell component; no remote attack vector is documented.