The vulnerability originates from an invalid pointer or reference that is released within the Windows kernel. This flaw permits an attacker who already has local access to gain elevated privileges. The weakness is classified as CWE‑763, indicating a bug that involves privilege escalation or misused privilege.

The affected product is Microsoft Windows 11, build 26H1. Only this specific version is listed as impacted; no other Microsoft operating systems or versions are known to be vulnerable per the CNA data.

The CVSS score of 7.8 signals a high severity, and the EPSS score of <1% indicates very low exploitation probability. It is not listed in the CISA KEV catalog, suggesting no known active exploitation yet. The attack requires local, authorized access and exploits a kernel pointer release, so an attacker with user privileges on a compromised machine could potentially execute this exploit.