This vulnerability is an integer overflow or wraparound bug in the Windows Client for NFS that allows an attacker who is already authenticated and has authorized access to the system to execute code with elevated privileges. The flaw is classified as CWE‑190 and can lead to local privilege escalation, compromising system integrity and confidentiality.

The affected products are Microsoft Windows 10 versions 1607, 1809, 21H2, 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, 26H1; and Windows Server 2012, 2012 R2, 2016, 2019, 2022, 2025 (including their Server Core builds and arm64 variants where applicable). All listed systems include the NFS client component that contains the vulnerable code.

The CVSS score of 7.8 indicates high severity for local privilege escalation. Because the flaw is triggered through the NFS client, an attacker only needs local authenticated access to the target machine – the attack vector is local, not remote. The EPSS score is unavailable, and the vulnerability is not listed in CISA’s KEV, suggesting no widespread exploitation yet, but the high CVSS and the local nature of the flaw warrant that organizations prioritize remediation. The integer overflow can be leveraged by malicious NFS requests or commands to overwrite critical values and gain elevated privileges.