The vulnerability is a heap‑based buffer overflow in the Windows Kernel that can be exploited by an authorized local attacker to elevate privileges, allowing the attacker to gain higher system access. The flaw is classified as CWE‑122, indicating an unchecked memory write that can be triggered through specially constructed data within user mode privileges.

Affected builds include Microsoft Windows 10 versions 1607, 1809, 21H2 and 22H2, Windows 11 versions 23H2, 24H2, 25H2, 26H2, 26H1, as well as several Windows Server editions from 2012 through 2025. All listed platforms have been identified in the advisory as vulnerable for local exploitation.

The CVSS score of 7.8 denotes a high impact vulnerability. With no EPSS score available and no listing in the CISA KEV catalog, the current exploit availability is unclear, but the flaw can be leveraged by an attacker with local presence. The attack vector is inferred to be local, requiring the attacker to already have some user or privileged access on the target machine. Once exploited, the attacker can take full control of the affected system.