Use after free in the Windows Audio Service allows an authorized local user to execute code with elevated privileges. The flaw enables an attacker who can run code on the target system to exploit a memory corruption condition in the audio service, resulting in a privilege escalation that bypasses expected access controls. The vulnerability is categorized as CWE-416.

Microsoft Windows 11 versions 24 H2, 25 H2, 26 H1 and 26 H2 for x64 and arm64, as well as Windows Server 2025 including Server Core installations, are impacted. Users running these operating systems without the pending Microsoft update are vulnerable to the local privilege elevation described above.

The CVSS base score of 7 indicates a significant impact for a local authorized attacker. No EPSS score is published, and the vulnerability is not listed in CISA's KEV program, suggesting it is not a widely exploited or actively leveraged CVE at this time. Nonetheless, because the flaw requires local code execution the attack vector is considered local. The risk is mitigated by applying the official security update once it becomes available.