The vulnerability is a use‑after‑free in Windows Hyper‑V that permits an attacker with local, authorized access to gain elevated privileges on the host. This flaw allows the attacker to execute code with higher rights, potentially taking full control over the affected system. The weakness is classified as CWE‑416, indicating a use‑after‑free bug that can lead to privilege escalation.

Affected Microsoft Windows operating systems include Windows 10 versions 1809, 21H2, 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, 23H2 (arm64), 26H1 (arm64); and Windows Server releases 2019, 2022, 2025, both standard and Server Core installations. These versions may be impacted by the CVE if Hyper‑V is enabled.

The publicly disclosed CVSS score is 7.8, indicating a moderate to high risk. EPSS data is not available, so the exact likelihood of exploitation is unknown; however, because an authorized local user can trigger the use‑after‑free, the attack vector is likely local. The vulnerability is not listed in the CISA KEV catalog, suggesting no confirmed industrial exploitation yet, but its severity warrants a swift patch.