The vulnerability involves improper link resolution before file access in the Windows Search Component. An authorized local user can craft a malicious link that will be followed by the component, resulting in elevated privileges. This flaw is identified as CWE‑59 (Incorrect Handling of Link or Reference).

Affected systems include multiple Microsoft Windows versions: Windows 10 from version 1607 through 22H2, Windows 11 from 23H2 through 26H2, and various Windows Server editions from 2012 to 2025, including server core installations.

The CVSS score of 7.8 indicates a high risk level. With no EPSS data available and the vulnerability not listed in CISA KEV, the exact likelihood of exploitation remains uncertain, but the flaw permits local privilege escalation, which is typically exploitable by malicious insiders or compromised accounts. Attackers would need local execution privileges; no remote attack vector is specified, so the risk is confined to authenticated local users. The lack of a KEV listing suggests there have not been reported exploits, but the high severity warrants immediate patching.