Integer overflow or wraparound in the Virtualization-Based Security enclave allows a user with existing local system access to gain higher privileges. The flaw stems from unchecked arithmetic in VBS enclave code, classified under CWE-190, and results in unrestricted escalation of privileges within the machine. The ultimate consequence is that an attacker who can execute code locally can impersonate a system administrator or launch further malicious activities on the compromised host.

Microsoft Windows 11 releases 23H2, 24H2, 25H2, 26H2, and 26H1 are affected, on both ARM64 and x64 architectures where applicable. Users of these editions should verify their installation version and architecture to confirm exposure.

The CVSS score of 7.8 indicates a high severity for local attacks. The exploit probability is unknown as no EPSS data is currently available, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be local, requiring authentication or an existing user context to exploit the overflow within the VBS enclave. Attackers with such authority could hijack system processes or elevate privileges without additional access.