Double free in the Windows Wired AutoConfig Service creates a memory corruption vulnerability that allows an attacker with local authorized access to elevate privileges. By triggering the double deallocation, an attacker can gain higher system privileges and potentially take full control of the affected Windows installation. The vulnerability falls under CWE-415, a double free bug that can lead to arbitrary code execution or privilege escalation.

The vulnerability affects Microsoft Windows 10 versions 1607, 1809, 21H2, and 22H2, Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1, as well as Windows 11 23H2 and 26H2 on arm64-based systems. It also impacts Windows Server editions 2012, 2012 R2, 2016, 2019, 2022, and 2025, including both standard and Server Core installations. All listed future and current releases marked as vulnerable by Microsoft are included.

The CVSS score of 7.8 indicates a medium‑to‑high severity for local privilege escalation. No EPSS score is available, and the vulnerability is not listed in CISA KEV, suggesting no known widespread exploitation. The double free is most likely exploitable by a local user with sufficient privileges to invoke Wired AutoConfig Service functions. Successful exploitation would let an attacker write arbitrary memory and execute code with elevated rights, thereby compromising the entire system.