The vulnerability is a use‑after‑free bug in the Windows Hyper‑V hypervisor that allows an attacker who can execute code on the host to read or modify memory that has already been freed, thereby elevating privileges. The weakness is identified as CWE‑416 and could compromise the confidentiality, integrity and availability of the host from the perspective of an attacker with local access.

Affected machines include Microsoft Windows 11 versions 23H2 and 22H3 as well as Microsoft Windows Server 2022. The bug resides in the Hyper‑V component shipped with those releases for both arm64 and x64 architectures on Windows 11 23H2, and for all architectures on Windows Server 2022.

The CVSS score of 9.3 indicates a critical severity, and the EPSS score is not currently available, meaning no publicly observed exploitation data exists. The vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be local because the description indicates an unauthorized attacker with local access to the host, and exploitation requires interaction with the Hyper‑V infrastructure which typically runs in kernel mode. Attackers could exploit this by leveraging privileged Hyper‑V guest or service processes, thus elevating privileges to SYSTEM level.