The vulnerability is a use‑after‑free flaw in the Windows Error Reporting component that lets an authorized local attacker gain higher privileges. By exploiting the stale memory reference, an attacker can execute arbitrary code with elevated rights, impacting confidentiality, integrity, and availability of the affected system. The weakness corresponds to the common weakness enumeration CWE‑416.

Microsoft Windows 10 versions 1607, 1809, 21H2, and 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1; and Windows Server releases 2012, 2012 R2, 2016, 2019, 2022, and 2025, including Server Core installations.

The CVSS base score of 7.0 indicates moderate severity. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is local; an attacker must have authorized local access to trigger the use‑after‑free and elevate privileges. Because the flaw resides in the Error Reporting process, exploitation can occur during normal operation without external triggers, making it a practical risk for systems that have not been patched.