Untrusted pointer dereference (CWE-822) in the Windows Error Reporting (WER) component grants an attacker privileged escalation only after they already possess local access or authentication. By manipulating the unmanaged pointer that WER incorrectly validates, a malicious user can execute code with higher privileges, potentially gaining system or administrator rights. The flaw results in a local privilege escalation with no well‑documented remote attack vector.

The vulnerability affects Microsoft Windows 11 releases 23H2, 24H2, 25H2, 26H2, and 26H1, covering both x64 and ARM64 architectures, as well as Windows Server 2025 and its Server Core installation. All listed editions are susceptible.

A CVSS v3.1 score of 7.8 signifies a high severity local privilege escalation. The EPSS score is present but below 1%, indicating a modest but not negligible likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the attack requires the attacker to be locally authorized; no remote exploitation path is supplied or inferred.