An improper link resolution routine in the Windows Search Component enables an authorized local attacker to perform a privileged escalation by corrupting path resolution, resulting in elevated system privileges. The flaw is categorized as a path traversal weakness (CWE-59) and carries a CVSS score of 7.8, indicating a high likelihood of significant impact if exploited. The official description confirms that local file access can be abused to move beyond the intended restrictions.

Affected systems include Windows 10 versions 1607, 1809, 21H2, and 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1; and several Windows Server editions such as 2012 R2, 2016, 2019, 2022, and 2025. The vulnerability spans both x86 and x64 architectures across these releases.

The CVSS score of 7.8 reflects a high severity level, while the EPSS score is not available and the vulnerability is not listed in CISA’s KEV catalog. Because the flaw requires local authorization to the Windows Search Component, the attack vector is most likely local. An attacker can craft a malicious link or file that exploits the link resolution process to access privileged resources, thereby elevating their permissions within the system.