The vulnerability is a broken access control flaw in Active Directory Domain Services, allowing an attacker who does not have authorization to execute code on the target system. This can compromise confidentiality, integrity, and availability of domain controller data, and may lead to system takeover. The weakness is identified as CWE-863.

The flaw affects multiple Microsoft Windows client and server releases, including Windows 10 versions 1607, 1809, 21H2, 22H2, Windows 11 versions 23H2, 24H2, 25H2, 26H2, 26H1, and Windows Server releases 2012, 2016, 2019, 2022, and 2025, both standard and server core installations. All domain controllers or machines running these operating systems are susceptible if Active Directory Domain Services is installed.

The CVSS score of 8.1 indicates a high severity. No EPSS value is publicly available, so the exploitation likelihood is currently unknown, but the vulnerability is not listed in CISA KEV. Given that the flaw allows code execution over a network, the most probable attack vector is a remote network adversary targeting the Domain Controller from an external or untrusted network segment. The attacker would need connectivity to the AD DS ports and the vulnerability does not explicitly specify additional privileges or requirements.