This vulnerability is an untrusted pointer dereference in the Windows kernel that permits an unauthorized attacker to elevate privileges over a network. The flaw allows the attacker to gain a higher privilege level on the target system, potentially enabling the execution of arbitrary code with kernel-level authority. The impact is direct compromise of confidentiality, integrity, and availability of the affected machine.

Affected releases include Windows 10 versions 1607, 1809, 21H2, and 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1; and Windows Server releases 2012, 2012 R2, 2016, 2019, 2022, and 2025, including both full and Server Core installations. All of these systems are vulnerable to a network-based privilege escalation attack.

The CVSS score of 8.1 indicates high severity. Although EPSS data is unavailable, the vulnerability is not yet reported in CISA's KEV catalog. The likely attack vector is a network attack, inferred from the fact that the flaw can be exploited over a network. If an attacker can reach the target, they can exploit the untrusted pointer dereference to obtain elevated privileges, potentially leading to full system compromise. High risk combined with the lack of broader exposure makes timely remediation critical.