The vulnerability originates from a missing authentication check on a critical function within Windows Modern Device Management (MDM). An attacker who is already authorized on the device can exploit this flaw to elevate their privileges locally, potentially gaining full administrative rights. This weakness can undermine the confidentiality and integrity of the system.

The flaw affects Microsoft Windows 10 versions 21H2 and 22H2, Windows 11 versions 23H2, 24H2, 25H2, 26H2 and 26H1, and Windows Server editions 2022 and 2025 (including Server Core). All listed builds are vulnerable to the missing authentication issue.

The CVSS score of 7.8 classifies this as a high–severity vulnerability. The EPSS score of 0.00284% indicates a very low probability of exploitation, though the risk remains for an authorized local user. The attack vector is local and requires an existing authenticated session; the attacker must invoke the affected MDM function to gain elevated privileges.