A use‑after‑free flaw in the Windows Bind Filter Driver enables a local user with authorised access to exploit a memory corruption bug, potentially gaining elevated privileges. The flaw is a classic dangling pointer error classified as CWE-416. It allows the attacker to corrupt memory and trigger privileged operations that were not intended for their identity, thereby escalating privileges within the system.

The vulnerability affects Microsoft Windows 11 builds 24H2, 25H2, 26H2, and 26H1, as well as Windows Server 2025, including the Server Core installation. Versions for ARM64-based systems such as Windows 11 26H2 and other x64 editions of Windows 11 are impacted. No specific patch version is mentioned in the data, so any update addressing CVE‑2026‑83852 should be applied.

The CVSS score of 7 indicates a high severity, but the EPSS score is not available, making it unclear how frequently this issue is actively exploited. The vulnerability is local and requires an authorised attacker, implying that compromised accounts or malicious insiders could exploit it. While it is not in the CISA KEV catalog, the local nature of the attack means that organisations should treat it as a critical internal risk.