An out‑of‑bounds read occurs within the Windows NTFS file system component when an authorized user processes a specially crafted file. The flaw allows the user to read data beyond the intended buffer, enabling privilege‑escalation on the local host. By hijacking the read operation, an attacker can obtain sensitive information and subsequently gain higher privileges, potentially compromising the entire machine.

Microsoft Windows 10 versions 1607, 1809, 21H2, and 22H2, Microsoft Windows 11 releases 23H2, 24H2, 25H2, 26H2, 26H1, as well as Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025 (including their Server Core editions) are vulnerable. All listed editions, on both x86, x64 and arm64 architectures, are impacted.

The CVSS score of 7.8 marks this as a high‑severity local privilege escalation. The EPSS score is not available, and the vulnerability is not present in CISA’s KEV catalog. The attack requires local access and legitimate file system privileges; it does not require network exposure. While the likelihood of exploitation may be moderate because of the local attack surface, the potential impact of gaining administrative rights on a Windows machine makes it urgent to remediate.