Heap‑based buffer overflow in the HID class driver can be triggered by a local authorized user, enabling the attacker to elevate privileges on the affected systems. The vulnerability arises from improper bounds checking of data written to heap memory, allowing an attacker to overflow the buffer and execute code with higher privileges. A successful exploitation would compromise the confidentiality, integrity, and availability of the compromised system by providing the attacker with administrative rights.

Affected Windows client and server products include Windows 10 (builds 1607, 1809, 21H2, 22H2), Windows 11 (versions 23H2, 24H2, 25H2, 26H2, 26H1), and Windows Server (2016, 2019, 2022, 2025). The issue is present in both arm64 and x86/x64 architectures where the HID class driver is installed.

The CVSS score of 7.8 indicates a high potential impact if local exploitation is achieved. EPSS data is unavailable, so the probability of exploitation cannot be quantified; however, the vulnerability is not yet listed in the CISA KEV catalog. Based on the description, the likely attack vector is a local, authorized user leveraging the HID driver from within the operating system. An attacker would need physical or remote access that grants them local authority to trigger the overflow.