This vulnerability involves a heap-based buffer overflow in the Windows USB Print Driver component of Windows 11 Version 24H2 (build 10.0.26100.0). An attacker with physical access can exploit this flaw to gain elevated privileges on the affected system. The CVSS vector indicates that the attack requires physical access (AV:P), has low attack complexity (AC:L), no privileges required (PR:N), and no user interaction (UI:N). The impact includes high confidentiality, integrity, and availability impacts (C:H/I:H/A:H). Microsoft has published an official fix for this vulnerability.

Successful exploitation allows an attacker with physical access to the affected Windows 11 system to elevate their privileges, potentially gaining full control over the system. This can lead to complete compromise of confidentiality, integrity, and availability of the system.

Microsoft has released an official fix for this vulnerability. It is recommended to apply the security update provided by Microsoft as detailed in their advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32223. No additional mitigation steps are indicated beyond applying the official patch.