The vulnerability is an out-of-bounds read in the Windows NTFS file system implementation that can be exploited by an attacker who has authorized local access to execute arbitrary code on the affected machine. The flaw is characterized by CWE-125 and allows the attacker to read memory beyond intended bounds, leading to a potential code execution path. The impact is local code execution, which can compromise confidentiality, integrity, and availability of the system.

Affected systems include various builds of Microsoft Windows 10 (versions 1607, 1809, 21H2, 22H2), Windows 11 (versions 23H2, 24H2, 25H2, 26H2, 23H2 arm64, 26H1 arm64), and multiple Windows Server releases (2012, 2012 R2, 2016, 2019, 2022, 2025). These encompass both 32‑bit and 64‑bit architectures as specified by the provided CPE strings, covering x86, x64 and arm64 platforms.

The CVSS base score of 7.8 indicates moderate to high severity, while the EPSS score is not available, making the precise exploitation probability uncertain. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog, which may reduce urgency, but the lack of a public exploit does not eliminate risk. The likely attack vector requires a locally authenticated attacker or one who can write to a file system location; therefore, containment depends on proper access controls and prompt patching.