The vulnerability is a heap‑based buffer overflow in the Windows kernel. An attacker who already has local user access can exploit the overflow to gain elevated privileges, enabling them to modify system configuration, install malware, or execute arbitrary code with kernel‑level rights. The impact therefore includes full control over the affected system, affecting confidentiality, integrity, and availability.

Affected operations run on Microsoft Windows 11 versions 24H2, 25H2, and 26H2 for arm64‑based systems, as well as on Windows Server 2025 and its Server Core installation. These products receive the vulnerability on ARM64 platforms.

The CVSS score is 7, indicating a high severity for local privilege escalation. The EPSS score is not available, so the likelihood of exploitation cannot be quantified. The vulnerability is not listed in CISA’s KEV catalog. Based on the description, the likely exploitation scenario involves a malicious user with standard rights on the machine who can execute specially crafted code to overflow the kernel heap and gain privileges. No public exploit is reported, but the high seriousness warrants swift remediation.