Heap‑based buffer overflow in the Windows Search component allows a local, authenticated attacker to execute code with elevated privileges. The flaw is a classic out‑of‑bounds write (CWE‑122) that can be triggered by manipulating search queries or cached data, enabling the attacker to gain system‑level access on the compromised machine.

The vulnerability affects Microsoft Windows 10 from version 1607 through 22H2, Windows 11 from version 23H2 through 26H2 (including the 26H1 release), and all Windows Server editions from 2012 through 2025, including Server Core deployments. All of these editions incorporate the Windows Search component used in the listed operating systems.

With a CVSS score of 7.8 the issue is considered high severity, yet the exploit requires a user with local authority and permission to interact with the Search service. EPSS information is not available, and the vulnerability is not yet catalogued as a known exploited vulnerability by CISA. The attack vector is inferred to be local; an attacker must log on to the affected system, invoke the Search API or trigger a query that exploits the heap overflow, then leverage the resulting elevated privileges to perform further malicious actions.