Improper verification of a cryptographic signature in the Windows Audio Service enables an authorized local attacker to increase their privileges on the affected system. The flaw arises from the service trusting a signature that is not properly validated, which falls under CWE‑347. An attacker who can initiate or influence the service can obtain elevated rights, potentially allowing the installation of malware, modification of system settings, or other actions that require higher privilege levels.

The vulnerability affects Microsoft Windows 11, specifically the 24H2, 25H2, 26H1, and 26H2 releases for ARM64-based systems. These versions correspond to the Windows 11 family of operating systems for ARM architecture.

The CVSS score of 7.8 classifies this as a high‑severity issue, and although the EPSS score is unavailable, the lack of listing in the KEV catalog suggests no known widespread exploitation yet. The attack vector is local; it requires an authorized or privileged user to manipulate the Windows Audio Service. Once the signature check is bypassed, the attacker can raise their own privileges on the local machine, making this a significant risk for environments where such users have access.