The vulnerability is a use‑after‑free flaw in Windows Secure kernel mode, allowing an attacker who already has local access to elevate privileges. The flaw may grant an attacker administrative rights on the affected system, thereby compromising confidentiality, integrity, and availability of the machine. The weakness is classified as CWE‑416.

Affected versions include Microsoft Windows 10 build 1809, 21H2, and 22H2; Windows 11 builds 23H2, 24H2, 25H2, 26H2, 26H1; and the corresponding Windows Server releases 2019, 2022, and 2025, both standard and server‑core installations.

The CVSS score of 7.0 indicates serious risk, yet the EPSS score is unavailable, implying no quantitative data on exploitation probability. The issue is not listed within the CISA KEV catalog, suggesting no confirmed widespread exploitation. Attackers must be able to run code locally, likely via a malicious application or script, and rely on the kernel’s improper memory handling to gain elevated privileges.