The Windows Clipboard User Service contains a race condition caused by improper synchronization of shared resources. When two threads access the same clipboard data concurrently, the service can incorrectly assume higher privileges. An authorized local user can exploit this flaw to gain elevated rights, potentially moving to administrator or SYSTEM level. This weakness is classified as CWE‑362.

The flaw affects multiple Microsoft Windows operating systems, including Windows 10 versions 1607, 1809, 21H2, 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1; and Windows Server editions 2016, 2019, 2022, 2025 (both standard and Server Core installations). All these versions rely on the Clipboard User Service component that is vulnerable.

The CVSS base score of 7 points reflects a potentially serious impact, while the absence of an EPSS rating means exploitation is not yet observed or measured, indicating a lower likelihood of active attacks. Because the vulnerability requires local, authorized execution, any user with access to a target machine can trigger the race condition by manipulating clipboard data. The issue is not currently catalogued in the CISA KEV list, reducing immediate exposure but not eliminating risk.