The vulnerability is a use‑after‑free condition in the Windows USB Print Driver. When triggered by an authorized user, the driver can be exploited locally to gain higher privileges, potentially allowing execution of arbitrary code with elevated rights. The flaw falls under CWE‑416 and can lead to system compromise if the attacker succeeds.

Microsoft Windows 10 (21H2, 22H2), Microsoft Windows 11 (23H2, 24H2, 25H2, 26H1, 26H2), and Microsoft Windows Server 2022 and 2025 (including Server Core) are affected across x86, x64, and ARM64 platforms.

The CVSS score of 7.0 indicates a high‑severity local exploit. EPSS data is not available and the vulnerability is not listed in KEV, suggesting limited public exploitation at this time. However, because the attack requires local authorized access, organizations with privileged users or weak access controls should consider it a significant risk.