A use after free flaw in Windows NTFS enables an attacker who has already authenticated to the system to gain higher privileges on that machine. The vulnerability allows local privilege escalation by exploiting a dangling pointer in the NTFS file system code, giving the attacker elevated access rights without requiring network connectivity or additional exploitation steps.

Microsoft Windows 10 versions 1809, 21H2, 22H2; Microsoft Windows 11 versions 23H2, 24H2, 25H2, 26H2, 26H1; Microsoft Windows Server 2019, Windows Server 2022, Windows Server 2025, including Server Core installations where applicable.

The CVSS score of 7 indicates high severity, while the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. The attack vector is local, requiring an authorized user or user who can write to the NTFS file system. Once the flaw is triggered, the attacker can obtain elevated privileges, potentially compromising system integrity and confidentiality.