The vulnerability is a use‑after‑free flaw in Windows Hyper‑V that lets an authorized local attacker gain elevated privileges. The flaw is classified as CWE‑416, resulting in a local privilege escalation that can potentially allow execution of arbitrary code with higher privileges.

Microsoft Windows 11 versions 24H2, 25H2, 26H2 (arm64) and 26H1 (x64), as well as Microsoft Windows Server 2025 and its Server Core installation are affected.

With a CVSS score of 7.8 the flaw is considered high severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, but the risk remains significant for systems that run Hyper‑V with potentially privileged local users. A local attacker who can execute Hyper‑V commands can trigger the use‑after‑free and elevate to a higher privilege level. The attack requires local access and the presence of the vulnerable Windows version; no remote exploitation vector is indicated in the description.