A kernel‑mode driver contains an out‑of‑bounds read that an authorized local user can exploit to gain elevated privileges. The flaw enables the attacker to read beyond intended memory limits, potentially corrupting control data and allowing escalation of rights within the operating system. This is a classic local privilege escalation weakness tied to improper bounds checking (CWE‑125).

Microsoft Windows 10 versions 1607, 1809, 21H2, 22H2, Windows 11 version 23H2, and Windows Server editions 2012, 2012 R2, 2016, 2019, 2022, and 2025 (including Server Core variations) are affected by this kernel driver flaw.

The CVSS score of 7.8 indicates a high impact once the vulnerability is exercised. EPSS data is not available, so the current exploitation probability cannot be quantified, but the flaw requires local code execution and prior user privileges. The vulnerability is not listed in the CISA KEV catalog, suggesting no currently known large‑scale exploitation. The likely attack vector is local, where an authorized user must deliver crafted input or leverage privileged processes to trigger the out‑of‑bounds read.