A use‑after‑free flaw in the Windows Desktop Window Manager core library allows an authorized local attacker to gain privileges above those of the affected user. The vulnerability can be triggered by OOB actions that manipulate memory after it has been freed, potentially enabling code execution or elevation of privileges within the same system. The weakness is a classic use‑after‑free; the attacker could use it to execute arbitrary code in kernel or user mode depending on kernel exploits used.

The flaw is limited to Microsoft Windows 11 version 26H1 on x64 systems. No other Microsoft operating system versions or other vendors are listed in the CNA affected‑product set.

The CVSS score of 7.8 indicates a high severity local privilege escalation. EPSS information is not available, and the vulnerability is not listed in CISA’s KEV catalog. The attack vector is likely local; an attacker must already have the ability to run code on the target machine. Once executed, the attacker can obtain elevated privileges and bypass user restrictions, potentially leading to uncontrolled system modification.