An untrusted pointer dereference flaw in the Windows CD‑ROM driver can be triggered by sending specially crafted requests over a network, allowing an attacker to execute arbitrary code with system privileges. The vulnerability is classified as CWE‑822 and carries a CVSS score of 8.8, indicating a high severity impact that could compromise confidentiality, integrity, and availability of the affected system. Because the flaw permits code execution, any successful exploit would effectively give the attacker full control over the compromised machine and potentially spread to other devices in the network.

The exploitation affects multiple Windows platforms. Microsoft Windows 10 versions 1607, 1809, 21H2, and 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1; and Windows Server editions 2012, 2012 R2, 2016, 2019, 2022, and 2025 (including their Server Core installations). All listed releases, irrespective of architecture, are susceptible unless mitigated by a patch.

With a high CVSS score, the vulnerability presents a significant risk to exposed systems. No EPSS score is currently available, so an exact exploitation probability cannot be determined; however, the lack of KEV listing suggests no known widespread active exploitation at this time. The likely attack vector involves a remote attacker leveraging the network interface of the CD‑ROM driver to send malicious data that triggers the pointer dereference, leading to code execution. While the vulnerability is detected as an unauthorized privilege escalation, the potential impact remains consistent with remote code execution risks.