This vulnerability is an out-of-bounds read in the Windows DWM Core Library that enables an attacker with local authorization to gain elevated privileges. The read operation can corrupt memory or disclose sensitive data, and the flaw has been identified as a Local Privilege Escalation mechanism. The CWE associated with this weakness is CWE-125, an out-of-bounds read. The impact is that an attacker who already has local access could potentially execute privileged code or achieve any privilege level the user is allowed to attain.

Affected products include Microsoft Windows 10 versions 1607, 1809, 21H2, and 22H2; Windows 11 versions 23H2, 24H2, 25H2, and 26H2; and Microsoft Windows Server builds 2016, 2019, 2022, and 2025, including Server Core installations. All listed builds run the vulnerable DWM Core Library component and are listed in the CNA affected products.

The CVSS score of 7.8 indicates a high severity risk of privilege escalation if the flaw is exploited. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting it has not yet been actively exploited in the wild. Based on the description, the likely attack vector is local: a malicious application or script running under a user account with rights to invoke DWM functions can trigger the out-of-bounds read and elevate the attacker’s privileges on the machine.