This vulnerability is an out‑of‑bounds write in the Windows Local Security Authority Subsystem Service (LSASS). An attacker who is not authenticated with the system can use the flaw to execute arbitrary code on the target machine, giving them full control over the compromised host. The flaw compromises confidentiality, integrity and availability of the affected systems.

Affected systems include all Microsoft Windows 10 releases from version 1607 through 22H2, Windows 11 releases from 23H2 to 26H2 (including 26H1), and Windows Server editions 2012, 2012 R2, 2016, 2019, 2022 and 2025. The vulnerability is present in both client and server editions across x86, x64 and ARM64 architectures as noted in the CNA vendor and product list.

The CVSS score of 8.8 indicates high severity. An exploit would likely be delivered over the network to a machine running an affected Windows or Server family, as the vulnerability requires network access to LSASS. The EPSS score is not available and the flaw is not listed in CISA’s KEV catalog, so the perceived exploit probability may be lower than for actively exploited vulnerabilities. However, the impact of remote code execution remains critical; organizations with exposed hosts should treat this threat with high urgency.