This vulnerability involves a heap-based buffer overflow in the Windows USB Print Driver component of Windows 11 Version 24H2 (build 10.0.26100.0). An attacker with physical access could exploit this flaw to elevate privileges on the affected system. The CVSS vector indicates that the attack requires physical access (AV:P), has low attack complexity (AC:L), does not require privileges or user interaction, and impacts confidentiality, integrity, and availability with high severity. Microsoft has published an official fix for this vulnerability.

Successful exploitation of this vulnerability could allow an attacker with physical access to the affected system to gain elevated privileges, potentially leading to full system compromise. The impact affects confidentiality, integrity, and availability at a high level. However, remote exploitation is not possible as physical access is required.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32223 to remediate this vulnerability.