The vulnerability permits a user who already has some authorized access to release an invalid pointer or reference within the Windows kernel. This flaw enables the attacker to gain higher privileges locally, potentially allowing full control over the affected system. The weakness corresponds to CWE‑763, which defines a kernel restructure/edit of internal data structures to obtain arbitrarily high privileges.

Affected products include Microsoft Windows 11 across multiple releases—23H2, 24H2, 25H2, 26H2, and 26H1—as well as Microsoft Windows Server 2025, including the Server Core installation. Versions spanning both arm64 and x64 architectures are impacted, as referenced by the associated CPE identifiers for these operating systems.

The CVSS score of 7.8 indicates a high severity for local privilege escalation. No EPSS value is available, so the likelihood of exploitation cannot be quantified, and the vulnerability is not listed in the CISA KEV catalog. The flaw requires a local authorized attacker; no remote or unauthenticated access is required. Once executed, the attacker can bypass system security boundaries and potentially compromise the entire machine. Given the high severity and local attack requirement, all users running the impacted versions should apply the official update promptly.