A use‑after‑free flaw in the Windows kernel allows an authorized attacker to gain local privileges. The vulnerability is a classic memory management error identified as CWE‑416. If exploited, the attacker could run code with elevated privileges, leading to full control over the affected system.

Microsoft Windows 11 versions 23H2, 24H2, 25H2, 26H1 and Microsoft Windows Server 2025 (including Server Core installations) are affected.

The CVSS score of 7.0 indicates a medium‑to‑high severity local exploit. No EPSS score is available, and the flaw is not listed in the CISA KEV catalog, so current public exploitation traffic is unknown. The likely attack vector is local or requires authenticated access; an attacker must already have some level of presence on the machine to trigger the use‑after‑free and elevate privileges.