Use after free vulnerability in Windows Image Acquisition allows an authorized local attacker to gain elevated privileges. The flaw occurs when a pointer is used after the associated memory has been freed, enabling the attacker to execute code with higher privileges. The impact is local privilege escalation, potentially allowing full system compromise on the affected machines.

Microsoft Windows 10 Version 21H2 and 22H2, Microsoft Windows 11 Version 23H2, 24H2, 25H2, 26H2, Microsoft Windows 11 Version 23H2 and 26H1, Microsoft Windows Server 2022, Microsoft Windows Server 2025, including Server Core installations are all affected. These versions are listed by Microsoft as vulnerable in the security update guide.

With a CVSS score of 7, the vulnerability carries a medium to high severity. The EPSS score is not available, and the issue is currently not listed in the CISA KEV catalog. Attackers need local, authorized access to the target machine to exploit the use‑after‑free flaw, making it a local privilege escalation scenario. Once exploited, an attacker can run code with elevated rights, compromise system integrity, and potentially pivot to higher‑privileged services.