This vulnerability is a use‑after‑free bug in Windows Hyper‑V that permits a local attacker to gain system‑level privileges. The flaw allows the attacker to execute arbitrary code with elevated privileges on the host machine, potentially compromising confidentiality, integrity, and availability. The weakness is classified as CWE‑416.

Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 Version 26H1, Microsoft Windows Server 2022, Microsoft Windows Server 2025, and the Server Core installation of Windows Server 2025 are affected. The vulnerability can be triggered in the Hyper‑V hypervisor running on these operating systems.

The CVSS score of 7.4 indicates moderate‑to‑high severity. The EPSS score of less than 1 % points to a low probability of exploitation at present. The vulnerability is not listed in the CISA KEV catalog. Attackers must have local access to the host and be able to interact with the Hyper‑V subsystem; the flaw requires triggering a use‑after‑free condition within the hypervisor code. Successful exploitation would allow the attacker to run code with system privileges on the host.