Use‑after‑free vulnerability in the Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges on an affected system when able to send crafted input over an adjacent network. The flaw occurs when the service frees a memory block and later accesses it, allowing the attacker to gain higher privileges than intended by the operating system. This privilege escalation could enable the attacker to perform actions that require elevated rights, such as changing system configurations or accessing protected resources.

Affected systems include Microsoft Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1, as well as Windows Server 2022 and Windows Server 2025, including Server Core installations. Both ARM64 and x64 architectures are impacted.

The CVSS score of 8.8 classifies this vulnerability as high severity. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that an attacker who can reach the Camera Frame Server Monitor service from an adjacent network can craft input to trigger the use‑after‑free condition and elevate privileges. Exploitation requires network access to the service but does not appear to require local user interaction, implying a moderate level of complexity in gaining the necessary access.