Local privilege escalation via heap overflow

Heap-based buffer overflow in Windows Storage in Microsoft Windows allows local authenticated users to gain elevated privileges. Microsoft has disclosed only that the flaw is in the Windows Storage component and stems from a heap-based buffer overflow; no affected function, storage path, or triggering input is public. Exploitation requires local authenticated code execution with low privileges and yields privilege escalation on the host rather than remote code execution; affected releases include Windows 11 23H2 through 26H1 and Windows Server 2022 and 2025.