The vulnerability is a heap-based buffer overflow in the Windows Error Reporting subsystem. Exploitation enables a local attacker to gain higher privileges on the affected machine. It is classified as CWE‑122, indicating a classic heap overflow flaw that can be weaponized to execute arbitrary code.

Affected systems include several Microsoft Windows operating systems. Users of Windows 10 build 1607, 1809, 21H2, and 22H2, as well as Windows 11 releases 23H2 through 26H2 (and 26H1), are susceptible. Server editions from Windows Server 2012 through 2025, including all core installations, also fall under the same impact scope. Both x86 and x64, and ARM64 variants are mentioned in the listed CPEs, covering the most common enterprise deployments.

The CVSS score of 7.8 reflects a high severity local privilege escalation risk, while the EPSS score is not available. The vulnerability is not currently listed in the CISA KEV catalog, suggesting no widespread exploitation yet. Based on the data, the attack vector is local and requires an authenticated user capable of triggering a Windows Error Reporting event. Exploitation would involve sending a crafted payload to overflow the heap and execute code with the same rights as the current user, potentially elevating privileges to system level.