The flaw stems from incorrect conversion between numeric types within the Windows TCP/IP stack, enabling an authenticated user to gain higher privileges on a compromised host. As a result, the attacker can execute arbitrary code with elevated rights, leading to full system compromise, data theft, or further lateral movement. This is a classic local privilege escalation vulnerability reflecting the weakness identified by CWE-681.

Affected installations include Windows 10 versions 1607, 1809, 21H2, and 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, 26H1; and Windows Server editions 2012, 2012 R2, 2016, 2019, 2022, and 2025, covering both standard and Server Core installations.

The CVSS score of 7.8 marks the issue as high severity, and the vulnerability is exploitable by any authorized local user. While the EPSS score is not available and the flaw is not listed in CISA’s KEV catalog, the local nature of the attack vector means that an attacker with access to the machine can leverage the weakness quickly, making it a significant risk for organizations that rely on the affected Windows versions.