This vulnerability involves a buffer over-read in the Windows Subsystem for Linux (WSL2) component of Microsoft Windows. It allows an attacker with local authorized access to potentially elevate their privileges on the affected system. The CVSS 3.1 vector indicates the attack requires local access with low complexity and no user interaction, and it impacts confidentiality, integrity, and availability with high severity. Microsoft has published an official fix to remediate this vulnerability.

An authorized local attacker could exploit this buffer over-read vulnerability to elevate their privileges, potentially gaining higher system rights than intended. This could lead to unauthorized access to sensitive information, modification of system data, or disruption of system availability.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57968 to remediate this vulnerability.