The flaw is an out‑of‑bounds read performed by the Windows DWM Core Library that can be abused by an authorized local user to gain higher privileges on an affected machine, as classified by CWE‑125. The read beyond intended bounds may expose sensitive data or alter memory in a way that elevates the attacker's rights, enabling execution of privileged code and access to resources normally restricted.

Microsoft Windows 10 versions 1607, 1809, 21H2, and 22H2; Microsoft Windows 11 versions 23H2, 24H2, 25H2, and 26H2; Microsoft Windows Server 2016, 2019, 2022, and 2025, including all Server Core installations.

The CVSS score of 7.8 indicates a high impact vulnerability that is exploitable from a local context. EPSS data is not available and the flaw is not listed in the CISA KEV catalog; however, because the attack requires only authorization on the target system, any user with local access could potentially exploit it. The risk is heightened on systems that run any of the listed versions without the recent cumulative updates that address the DWM Core Library.