The vulnerability is a heap-based buffer overflow in the Windows Kernel that permits an authorized local user to elevate their privileges. The flaw occurs when privileged code paths incorrectly handle memory, allowing the attacker to overwrite control data and subsequently spawn code that runs with elevated rights. The result is the ability to gain administrator or SYSTEM level access on a compromised machine, giving full control over the system.

All Microsoft Windows 10 releases from version 1607 through 22H2, Windows 11 releases from 23H2 through 26H2 (including ARM64 variants), and the corresponding Windows Server editions from Server 2012 through Server 2025 are affected. Native x86, x64, and ARM64 architectures are included.

The CVSS score of 7.8 categorizes this flaw as a high‑severity local privilege‑escalation vulnerability. Although the EPSS score was not published, the lack of a KEV listing suggests no currently known exploit code is actively used in the wild. The likely attack vector requires an attacker who already has local user rights, making this flaw especially relevant in environments where users possess elevated privileges or when an attacker can bypass restrictions. Given the high score and the potential for full system compromise, organizations should treat this flaw with high urgency.