This vulnerability arises from insufficient granularity in Windows StateRepository API access control, permitting an authorized local user to elevate privileges. The weakness is classified as CWE‑1220 and CWE‑285. The result is local privilege escalation, potentially allowing a user to gain administrative rights or broader access to system resources.

Affected systems include Microsoft Windows 11 on versions 24 H2, 25 H2, 26 H1 and 26 H2. The vulnerability spans both x64 and arm64 architectures, as reflected in the CPE list and product names.

With a CVSS score of 7.8, this issue falls into the high‑severity range. The EPSS score is not available, and the vulnerability is not listed in CISA's KEV catalog. Since the exploit requires only local authority, an attacker who can execute code in a low‑privileged context can manipulate the StateRepository API to achieve elevated rights. The success of exploitation depends on the ability to call the compromised API functions, which typically requires some knowledge of system configuration or use of privileged tooling.