The CVE documents an integer overflow or wraparound in a Windows kernel‑mode driver that an unauthorized local user with physical access can exploit. This flaw enables the attacker to obtain kernel‑level privileges, allowing them to perform operations normally restricted to privileged users. The vulnerability does not explicitly state any additional capabilities beyond privilege escalation.

Microsoft Windows 10 versions 1607, 1809, 21H2, 22H2, Windows 11 versions 23H2, 24H2, 25H2, 26H2, 26H1, and Microsoft Windows Server editions 2012, 2012 R2, 2016, 2019, 2022, and 2025, including Server Core installations, are affected by this elevation of privilege flaw.

The CVSS score of 6.8 indicates moderate severity. No EPSS data is available, and the vulnerability is not included in the CISA KEV catalog. The attack vector requires physical access to the device, making the threat primarily relevant to environments where such access is possible. Thus, exploitation risk is contingent on the controls in place to prevent unauthorized physical interaction with the affected systems.