A use‑after‑free flaw in the Windows TCP/IP stack permits an attacker who already has local access to elevate privileges on the host. The flaw arises when the kernel reuses a freed memory buffer without clearing it, allowing the attacker to execute code with higher rights and compromise the integrity of the system.

Microsoft Windows 10 versions 1607, 1809, 21H2, 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1; Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025. These products run on x86, x64, and ARM64 architectures as noted by the associated CPE strings.

The CVSS score of 7 indicates medium‑to‑high severity, but no EPSS figure is available and the vulnerability is not listed in the CISA KEV catalog, suggesting limited publicly known exploitation. The attack vector is local; an authorized user with network access to the machine can exploit the use‑after‑free to gain elevated privileges and potentially launch further attacks with those rights.