The vulnerability is a use‑after‑free condition in the Windows Universal Disk Format (UDFS) file system driver. An attacker who already has some form of local access can trigger the flaw to gain higher privileges. By exploiting this defect the attacker can elevate privileges and potentially take full control of the affected machine. The weakness corresponds to a buffer overflow class of error (CWE-122).

The flaw affects multiple Windows client and server releases. On Windows 10 it is present in versions 1607, 1809, 21H2 and 22H2. On Windows 11 it impacts versions 23H2, 24H2, 25H2, 26H2 and 26H1. Server editions affected include Windows Server 2012 (full and Core), Windows Server 2012 R2 (full and Core), Windows Server 2016, Windows Server 2019 (full and Core), Windows Server 2022 and the forthcoming Windows Server 2025 (full and Core).

The CVSS score is 7.8, indicating high severity. No EPSS score is publicly available, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. Based on the description the attack vector is local; an authorized attacker must already have access to the system to trigger the use‑after‑free condition and elevate privilege.