The vulnerability is a heap-based buffer overflow that occurs within the WebDAV component of Windows operating systems. When triggered, it grants an attacker who is already authenticated to the local system the ability to run code with elevated privileges. This weakness, identified as CWE-122, could allow a malicious user to gain administrator level access, providing full control over the affected system. The impact is limited to the local machine, but achieving administrator privileges effectively gives the attacker system‐wide control.

The flaw affects a wide range of Microsoft Windows platforms: Windows 10 builds 1607, 1809, 21H2, and 22H2; Windows 11 builds 23H2, 24H2, 25H2, 26H2, and 26H1; and several server editions including Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025, both in normal and Server Core configurations. Any machine running one of these operating systems with the WebDAV feature enabled is potentially vulnerable.

The calculated CVSS score is 7, indicating a high severity but not critical. EXSS data is not available, so the likelihood of exploitation on the wider internet is unclear. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is a local attack by a user with legitimate access to the affected system; exploitation would involve triggering the overflow through the WebDAV service. No public exploit has been disclosed at this time, but the combination of a local attacker and a privilege‑escalation vector warrants prompt action.