The CVE details a use‑after‑free flaw in Microsoft Windows Media Foundation that permits an attacker with local, authorized access to gain higher privileges. This flaw does not provide remote code execution, but it allows the exploitation to execute code in the context of the currently logged‑on user with elevated rights. The vulnerability falls under Use After Free (CWE-416).

Affected users run on Microsoft Windows 10 versions 1809, 21H2, and 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H1, and 26H2; and Windows Server 2019, including the Server Core installation. Both x86 and arm64 hardware are impacted, as indicated by the available CPE entries.

The flaw carries a CVSS base score of 7.8, indicating high severity, but the EPSS score is not published and the vulnerability has not been listed in the CISA KEV catalog. Attackers would need local, authorized access to supply a crafted media file or exploit scenario; therefore the risk is limited to users who can run trusted applications. The lack of remote exploitation vectors means that remediation should focus on patching within the organization’s privileged user accounts.