The vulnerability is a heap‑based buffer overflow within the Windows NTFS file system component. An attacker who already has local access can craft malicious input that overflows a heap buffer, allowing the attacker to elevate privileges on the target machine. The flaw directly maps to CWE‑122 and can give an attacker higher‑privilege execution rights on the compromised system.

Microsoft Windows desktop and server releases are affected, including Windows 10 versions 1607, 1809, 21H2, and 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, 26H1; and Windows Server releases from 2012 through 2025. Users running any of these operating systems are at risk if the vulnerability remains unpatched.

The CVSS score of 7.8 classifies the flaw as high severity. Exploitation requires local access or an authorized user context, so it is not remotely exploitable via the network, and EPSS data is currently unavailable. The vulnerability is not listed in the CISA KEV catalog. The attack vector is likely local, with the attacker needing to execute code or supply crafted data to the NTFS component. Given its local scope and the lack of a publicly known exploit, the immediate risk is moderate to high for systems with privileged users.