Based on the description, it is inferred that the use‑after‑free vulnerability in the Windows Brokering File System allows a local attacker to trigger the flaw, gain elevated privileges, and potentially execute arbitrary code with system‑level rights, thereby bypassing security controls and establishing a foothold on the host. This flaw is identified as CWE‑416 and presents a significant risk if exploited.

Microsoft Windows 11 version 24H2, 25H2, and 26H1, as well as Microsoft Windows Server 2025, including Server Core installations, are affected. The vulnerability exists in the x64 builds of Windows 11 24H2 and 26H1, and in the arm64 build of Windows 11 25H2.

Based on the description, the attack requires a local authorized user. The CVSS score of 7.8 indicates a high severity for local privilege escalation, while the EPSS score below 1% shows exploitation is unlikely in the near term. The flaw is not listed in the CISA KEV catalog. Exploitation would involve manipulating the file system to trigger the use‑after‑free, but this path is highly specific and dependent on local privileges.