Use after free in OpenSSH for Windows allows an authorized local attacker to elevate privileges. This flaw enables execution of code with higher privileges than the attacker initially possesses, leading to full system compromise. The weakness corresponds to CWE-416, indicating memory misuse leading to unintended behavior.

Microsoft Windows 10 versions 1809, 21H2, and 22H2, Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1, as well as Windows Server 2019, Windows Server 2019 Server Core, Windows Server 2022, Windows Server 2025, and Windows Server 2025 Server Core are affected. The issue specifically involves OpenSSH for Windows components installed on these OS releases.

With a CVSS score of 7.8 the vulnerability is considered high severity. The EPSS score is not available, and the vulnerability has not been listed in the CISA KEV catalog. Because the flaw requires a local authorized attacker and a use‑after‑free condition, exploitation is unlikely to be feasible from a remote stand‑point but is feasible for users with local access. Organizations that allow local privileged users or rely on OpenSSH for secure remote administration should prioritize patching.