A null pointer dereference in the Schannel component of Windows allows an attacker with local access to gain elevated privileges on the affected machine. By exploiting this flaw, the attacker can bypass the security model and obtain higher rights such as administrator privileges. The vulnerability is classified under CWE‑476, indicating that an invalid pointer operation can result in unauthorized code execution.

Affected releases include Microsoft Windows 10 versions 1607, 1809, 21H2, and 22H2, as well as Windows 11 versions 23H2, 24H2, 25H2, 26H1, and 26H2, covering both x64 and arm64 platforms. Windows Server releases impacted are 2012, 2012 R2, 2016, 2019, 2022, and 2025, with both server and server‑core installations vulnerable.

The CVSS score of 7.8 places this flaw in the high severity range, and the EPSS score of < 1% indicates an extremely low likelihood of public exploitation as of this analysis. Because the attack requires local authorized access, the exploit vector is likely local rather than remote. The vulnerability is not yet listed in the CISA KEV catalog, suggesting no publicly known active exploits have been reported.