Use-after-free bug in the Windows 10 and 11 Win32 kernel subsystem allows an authorized local attacker to gain elevated privileges on the host. By triggering the flaw the attacker can access restricted resources, execute code with SYSTEM privileges, and compromise system integrity. The weakness is classified as CWE‑416, indicating a use of a freed memory reference. The impact is an escalation of local privileges, potentially leading to malicious payload deployment and unauthorized configuration changes.

The vulnerability affects a broad range of Microsoft Windows products, including Windows 10 from version 1607 through 22H2; Windows 11 from 23H2 through 26H2 (including the 26H1 build); Windows Server 2016, Server 2019, Server 2022, and Server 2025 (including core installations). The CNA list does not specify patch‑level cutoffs, implying that all revisions within these product lines remain vulnerable until the update is applied.

The CVSS base score of 7 indicates high severity, but the EPSS score is unavailable, so the exact likelihood of exploitation is unknown. The flaw requires a local, authenticated user to trigger, and the vulnerability is not listed in the CISA KEV catalog, which suggests no confirmed public exploitation. The threat is therefore moderate to high in environments where privileged users can be compromised, but public exploitation is currently unlikely.