A local use‑after‑free flaw in the Windows Search component allows an attacker who has local user access to trigger privileged code execution, potentially escalating to system level. The weakness is an instance of improper use of freed memory (CWE‑416). The vulnerability can compromise the confidentiality, integrity, and availability of the affected system if exploited to gain higher privileges. The description does not indicate remote exploitation; the known impact is confined to local accounts.

Microsoft Windows 10 versions 1607, 1809, 21H2, 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, 23H2, 26H1; Windows Server 2012, 2012 R2, 2016, 2019, 2022, 2025, including Server Core installations. The flaw also affects arm64‑based Windows 11 editions.

The CVSS score of 7.8 indicates a high risk vector. The vulnerability has not yet been listed in CISA’s KEV catalog, implying no confirmed public exploits. The likely attack vector is local; an attacker must already be authenticated or otherwise have local access to trigger the use‑after‑free. Because the flaw is local and the exploit requires privileged input, the threat is significant but constrained to environments where local attacker presence is possible.