This vulnerability is a use‑after‑free flaw within the Windows TCP/IP stack that enables an attacker with local authorization to elevate privileges. The flaw arises after memory is freed but still accessible, allowing kernel‑level code execution. The impact is privilege escalation on the affected machine.

Microsoft Windows 10 versions 1809, 21H2, and 22H2; Windows 11 versions 24H2, 25H2, and 26H1; Windows Server 2019 (including Server Core), Windows Server 2022, and Windows Server 2025 (including Server Core). All x86, x64, and ARM64 builds listed are affected.

The CVSS score of 7 indicates moderate severity. EPSS is under 1%, suggesting a low probability of exploitation at present, and the vulnerability is not listed in the CISA KEV catalog. An attacker would need local legitimacy—an already authenticated user or local privilege—to exploit the use‑after‑free condition. Without such access, the threat is limited to elevating privileges within the same machine rather than remote code execution. The available data does not provide evidence of a remote exploitation path or widespread active exploitation.