The vulnerability is a time‑of‑check to time‑of‑use race condition in the Windows Broadcast DVR User Service that allows an attacker with local authorized access to gain higher privileges on the affected machine.

This flaw affects Microsoft Windows 10 21H2 and 22H2, and Windows 11 23H2 through 26H2 as well as the 26H1 release, across x86, x64, and arm64 architectures as documented by Microsoft.

The CVSS base score of 6.5 indicates moderate severity, and the vulnerability is exploitable only when the attacker holds existing local privileges; however, the impact of an elevation to full system control is significant. Because the defect is a local privilege escalation, it has not been listed in the CISA KEV catalog and there are currently no publicly known exploits, but administrators should apply the published security update promptly to close the race condition.