An use‑after‑free bug in Windows SmartScreen allows a locally privileged attacker to gain higher privileges on the machine. The flaw is a memory safety violation (CWE‑416) that can be triggered by an authorized user. If exploited, the attacker could run code with elevated rights, potentially enabling full system takeover.

Vulnerable versions include Microsoft Windows 11 releases 23H2, 24H2, 25H2, 26H2, and 26H1, as well as Windows Server 2025, including Server Core installations. The issue affects both x64 and ARM64 architectures as listed by Microsoft.

The CVSS score of 7.8 indicates a high likelihood of severe exploitation impact if the vulnerability is leveraged. While no EPSS score or KEV listing is available, the lack of public exploitation data suggests moderate risk, although local attackers with access to the target system could potentially craft an exploit. The vulnerability requires a local, authorized presence, so environments with strict user isolation are less exposed.