The vulnerability is an out-of-bounds read in the Desktop Window Manager component, which can be leveraged by an authorized attacker to elevate privileges locally. A flaw that permits reading beyond the allocated memory bounds may allow manipulation or acquisition of privileged data, thereby giving the attacker higher levels of control over the affected system.

Microsoft Windows 10 versions 1809, 21H2, 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, 26H1; Windows Server 2019, Server 2019 Server Core, Server 2022, Server 2025, Server 2025 Server Core.

The CVSS score of 7.8 indicates a high severity vulnerability. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting that widespread exploitation has not yet been observed or documented. The likely attack vector is local; an attacker with sufficient privileges to run Desktop Window Manager can trigger the out-of-bounds read, leading to privilege escalation. The absence of a publicly available exploit does not reduce the risk, as the vulnerability still permits privilege gain if an attacker can force the vulnerable component to execute the read.