This vulnerability (CVE-2025-64658) involves a race condition (CWE-362) in the Windows Shell of Windows 10 Version 1809 (build 10.0.17763.0). The flaw arises from improper synchronization when multiple processes concurrently access shared resources, enabling a local attacker with limited privileges and requiring user interaction to elevate their privileges. The CVSS 3.1 vector indicates the attack requires local access, high attack complexity, low privileges, and user interaction, but can result in complete confidentiality, integrity, and availability impact. Microsoft has released a patch to fix this vulnerability.

An authorized local attacker can exploit this race condition to elevate their privileges on the affected Windows 10 Version 1809 system. Successful exploitation could lead to full system compromise, including complete control over confidentiality, integrity, and availability of the system. There are no known exploits in the wild at this time.

A patch is available from Microsoft to remediate this vulnerability. It is recommended to apply the official update promptly to mitigate the risk of privilege escalation. Since this is not a cloud service, remediation depends on applying the patch to affected systems. No additional vendor advisory details were provided, so check Microsoft's official security update channels for the specific patch.