This vulnerability is a use‑after‑free flaw in the Windows Win32 kernel subsystem. An attacker with local authorization can trigger the freed memory reference to elevate privileges, allowing the user to execute code with higher privileges or access restricted resources. The weakness falls under CWE‑416, indicating unsafe use of freed memory leading to potential escape of the security boundary.

Microsoft Windows 11 versions 23H2, 24H2, 25H2, 26H2 and 26H1, as well as Windows Server 2025 (Server Core). Both x64 and arm64 builds are affected.

The CVSS score of 7 signals a medium‑to‑high severity for local privilege escalation. EPSS data is not available, and the issue is not yet listed in the CISA KEV catalog. An authorized local user is the most likely attacker profile; the vulnerability requires local access and privileges to exploit. Once triggered, the attacker can gain elevated rights without needing network exposure or additional exploits.