A use-after-free flaw exists in the Windows Desktop Window Manager Core Library that an attacker with local account privileges can exploit to execute code with elevated rights. The vulnerability allows a trusted user to trigger memory corruption during a deallocation event, potentially leading to unauthorized access to protected resources or system controls.

The affected product is Microsoft Windows 11 version 26H1 running on x64 architecture. Only systems that include the unpatched DWM core component are vulnerable; all other Windows releases were not explicitly listed in the CNA data.

The CVSS base score of 7.8 indicates a high-impact vulnerability. The EPSS score is not available, and the issue is not presently listed in the CISA KEV catalog, suggesting that widespread exploitation has not been confirmed. The exploit requires a local user context and direct interaction with the DWM core library; no remote attack vector is documented. Consequently, the risk is significant for systems that allow local users to run arbitrary applications in an elevated context.