Improper access control in the NTFS file system permits an authenticated user to grant themselves elevated privileges on the local machine. Classified as CWE‑863, the flaw enables a local privilege escalation that can compromise system integrity and confidentiality by allowing an attacker to execute higher‑privileged code or modify protected system resources.

The vulnerability affects multiple Microsoft Windows releases. Affected editions include Windows 10 versions 1607, 1809, 21H2, 22H2 and Windows 11 versions 23H2, 24H2, 25H2, 26H2, 26H1 as well as Windows Server 2016, 2019, 2022, and 2025, in both full and Server Core installations.

The CVSS score of 7.8 indicates a high‑severity local privilege escalation. No EPSS score is available, but the flaw requires an authenticated user, suggesting a moderate likelihood of real‑world exploitation. An attacker who can present a valid user context on the affected systems can exploit the flaw to obtain elevated privileges and potentially compromise the entire machine.