The vulnerability is a use‑after‑free in the Windows Bind Filter Driver. An attacker with local authorized access can manipulate the driver context to obtain higher privileges than they originally possessed. This flaw is categorized as CWE‑416 and enables local privilege escalation.

Microsoft Windows 11 for the versions 23H2, 24H2, 25H2, 26H2, and 26H1, as well as Windows Server 2025 including Server Core installations, are affected by this flaw.

The CVSS score of 7.8 indicates a high severity. The EPSS score is not available, so current exploitation likelihood cannot be quantified, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the attack vector is local and requires an authorized user to interact with the Bind Filter Driver. If exploited, the attacker could gain elevated privileges on the machine, potentially allowing them to execute arbitrary code or elevate further administrative rights.