This vulnerability is a use‑after‑free flaw in the Windows Broadcast DVR User Service. When an authorized local user triggers the free operation while the service still retains a reference, the system can execute arbitrary code with elevated privileges. The flaw can be abused to gain SYSTEM‑level access, allowing an attacker to modify system settings, install malware, or compromise data confidentiality and integrity. The weakness is identified as CWE‑416, indicating a classic use‑after‑free bug.

Affected products include Microsoft Windows 10 Version 1809, 21H2 and 22H2, and Microsoft Windows 11 Versions 23H2, 24H2, 25H2, 26H1 and 26H2. The vulnerability applies across x86 and x64 architectures as well as ARM64 for certain builds.

The CVSS score of 7 places this flaw in the high‑severity range. No EPSS score is publicly available, and the vulnerability is not listed in the CISA KEV catalog. Based on the description the attacker must be authorized and have local access to the target machine, so the exploitation path is a local escalation scenario rather than a remote attack.