Use After Free in the Message Queuing Queue Manager gives a local attacker with authorized access the ability to elevate privileges. The flaw stems from the improper handling of a freed memory reference, allowing the attacker to manipulate control flow and execute arbitrary code with higher privileges. This elevation can lead to full system compromise if the attacker exploits the privilege to gain administrative rights.

Microsoft Windows 10 releases starting with version 1607 through 22H2, Windows 11 releases 23H2 to 26H2, and Windows Server editions from 2012 through 2025 (including Server Core variants) are impacted. All builds listed in the CNA vendor/product list experience this susceptibility in the Windows Message Queuing component.

The CVSS score of 7.8 indicates a high impact, while the EPSS score is currently unavailable but the vulnerability is not yet in the CISA KEV catalog. The attack requires local, authorized access; the offender must first authenticate to the system and then interact with the vulnerable queue manager process. Successful exploitation would grant the attacker elevated privileges, potentially enabling lateral movement or persistence. The lack of exploit evidence means the current risk may be moderate to high depending on an organization's exposure to local attackers.