Use after free in the Windows kernel gives an authorized local attacker the ability to execute arbitrary code with system privileges. This flaw, classified as CWE‑416 (Use After Free), can compromise confidentiality, integrity, and availability by enabling the attacker to modify kernel state or inject malicious instructions. The vulnerability is exploitable only by users who already have some level of local access, but once triggered it grants full system control.

Affected products are Microsoft Windows 11 (versions 23H2, 24H2, 25H2, 26H2, 26H1) and Windows Server 2022 and 2025 (including Server Core installations). The flaw applies to both x64 and ARM64 architectures as listed in the known CPEs. No further version granularity is provided beyond the specified releases.

With a CVSS base score of 7 the vulnerability sits in the high severity range, but the EPSS score is not available. It is not yet in the CISA KEV catalog. The likely attack path requires local execution with an account that can run code, making it a local privilege‑escalation scenario. The exploit success probability remains uncertain due to missing EPSS data, yet the high score and kernel‑level impact warrant prompt remediation.