This vulnerability is a use‑after‑free in Microsoft Windows Kerberos that allows an attacker with local access to a system to elevate their privileges. The flaw occurs when Kerberos ticket processing incorrectly reuses a memory buffer, enabling the attacker to corrupt kernel data or code paths that give them elevated authority. Because the attacker only needs to be an authenticated user on the target machine, the impact is a local privilege escalation that can compromise confidential data and allow modification of system configurations.

Affected versions include Windows 10 starting from 1607 through 22H2, Windows 11 from 23H2 to 26H2 (including arm64 variants), and multiple Windows Server releases from 2012 up to 2025, encompassing both full and server core installations. The list of affected CPEs covers all x86, x64, arm64 architectures referenced in the CNA data.

The CVSS score of 7 indicates a medium‑to‑high severity. The EPSS score is not provided, but the lack of a KEV listing suggests no widespread, publicly exploited instances are known at this time. Risk remains significant for organizations that maintain legacy Windows versions and provide local administrators with elevated rights, as the attack requires only local access and a valid user context.