A heap-based buffer overflow exists in the Windows Partition Management Driver, a kernel‑level component that manages disk partitions. The vulnerability can be abused by an attacker to execute arbitrary code with elevated privileges, effectively allowing the attacker to take full control of the affected system.

The driver is present on a range of Windows operating systems: Windows 10 releases 1809, 21H2, and 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1; and Windows Server variants 2019 (including Server Core), 2022, and 2025 (including Server Core). Any installations of these OS releases that have not applied the latest security update are vulnerable.

The CVSS score of 8.8 indicates a high severity based on privilege escalation. The EPSS score is listed as less than 1%; this reflects a very low but nonzero probability of exploitation in the wild. Because the vulnerability is not listed in the CISA KEV catalog, there is no evidence of widespread active exploitation. The description states that the elevation can occur over a network, so the logical attack vector is network‑based; an attacker with network access to a vulnerable system could trigger the overflow. Organizations should view this as a high‑risk issue and apply the patch as soon as possible to eliminate the elevation of privilege vector.