A use‑after‑free bug in the Desktop Window Manager can be triggered by an authorized local user to run code with higher privileges. The flaw is a memory‑management error identified as CWE‑416. Gaining elevated rights enables the attacker to modify system files, install malware, or otherwise control the machine, thereby compromising confidentiality, integrity, and availability.

Affected builds include Microsoft Windows 11 versions 23H2, 24H2, 25H2, and 26H1, as well as Windows Server 2025 (both full and Server Core installations).

The CVSS score of 7 indicates a high‑severity vulnerability. The EPSS score of 1% shows that, while the likelihood of exploitation is low, it is not negligible. The vulnerability is not listed in CISA’s KEV catalog, suggesting no known widespread exploitation yet. Attackers would need local access; this vector is inferred because the description specifies an authorized local user can elevate privileges. Successful exploitation would grant administrative rights, enabling the attacker to modify system files, install malware, or otherwise gain full control of the machine, thereby compromising confidentiality, integrity, and availability.