The vulnerability is a use‑after‑free flaw in the Windows kernel that allows a local attacker with sufficient privileges to execute arbitrary code as a higher privileged user. This defect is classified as CWE‑416 and results in local privilege escalation, potentially giving the attacker the same rights as the SYSTEM account on the affected machine. The flaw can compromise confidentiality, integrity, and availability if exploited successfully.

The flaw affects Microsoft Windows 10 builds from version 1607 through 22H2, Microsoft Windows 11 builds from version 23H2 through 26H2, and all Windows Server editions from 2012 to 2025, including server core installations. These operating systems include both x86 and x64 architectures across the listed releases.

The CVSS base score is 7, indicating a high severity for local privilege escalation. The EPSS score is not available, so the exact likelihood of exploitation cannot be quantified, and the vulnerability is not listed in the CISA KEV catalog. Attack execution requires local access by an authorized user to trigger the use‑after‑free; based on the description, remote exploitation is unlikely, so the impact on any compromised machine is significant.