The vulnerability is a use‑after‑free in the Windows Search Component. An authorized local user can exploit the flaw to gain higher privileges, potentially running arbitrary code with system‑level rights. The weakness is identified as CWE‑416, a classic memory corruption defect that can lead to privilege escalation.

Affected products include Microsoft Windows 11 Version 24H2, 25H2, 26H1, and 26H2, as well as Microsoft Windows Server 2025 and its Server Core installation. The vulnerability applies to both arm64 and x64 installations as indicated by the vendor’s advisory.

The CVSS score of 7.0 classifies it as high severity. The EPSS score is below 1%, indicating a very low but non‑zero probability of exploitation, and it is not listed in the CISA KEV catalog. The attack vector is local; an attacker must already have local access to the system. Once exploited, privilege can be elevated to any level allowed for the host.