This vulnerability is a heap‑based buffer overflow in the Windows Media component. An attacker who can run code locally on a Microsoft Windows system can exploit the overflow to gain elevated privileges, potentially executing arbitrary code with SYSTEM rights and compromising confidentiality, integrity, and availability. The weakness is a classic buffer overflow classified as CWE‑122.

Affected include Microsoft Windows 10 versions 1607, 1809, 21H2, and 22H2; Microsoft Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1; and Microsoft Windows Server 2012 through 2025, including Server Core installations. These products run on x86, x64, and arm64 architectures as noted in the CPE list.

The CVSS base score of 7.8 indicates high severity. The EPSS score is currently unavailable, so the likelihood of exploitation is uncertain. The vulnerability is not listed in the CISA KEV catalog, suggesting that no widespread, publicly available exploits have been observed yet. The attack requires local authorization; the attacker must have an active user session or be able to execute code on the target machine. Once the overflow is triggered, the attacker can elevate privileges and potentially install malware or gain system‑level control. No formal workaround exists at present; users must rely on the official Microsoft patch once released.