Improper link resolution before file access in the Windows WalletService enables an authorized local user to gain higher privileges on the system. The vulnerability involves the service following a link that references a protected resource; based on the description, it is inferred that an attacker could craft a link to bypass intended access controls and elevate privileges to a more privileged user context.

Microsoft Windows 10 versions 1607, 1809, 21H2, and 22H2; Microsoft Windows 11 versions 23H2, 24H2, 25H2, 26H2, 26H1; and Microsoft Windows Server editions 2016, 2019, 2022, and 2025 (including server core installations).

The CVSS score of 7.8 classifies this flaw as high severity. EPSS data is not available, so the likelihood of exploitation is uncertain, and the vulnerability is not listed in the CISA KEV catalog. This local, privilege‑escalation flaw can be leveraged by an authenticated or otherwise authorized user to compromise the integrity and confidentiality of the system or its data. Because the attack requires local access and an authorized user, the attack surface is limited but the impact is significant if an internal user or service account is compromised.