The vulnerability is a use‑after‑free flaw in the Windows USB Print Driver that allows an attacker with local access to execute code with elevated privileges. By manipulating driver memory, an attacker can gain SYSTEM‑level rights, potentially modifying system configuration, installing persistence mechanisms, or accessing all user data on the machine.

The flaw affects several Windows releases, including Windows 10 versions 21H2 and 22H2, Windows 11 versions 23H2, 24H2, 25H2, 26H2, devices running version 23H2, 26H1, as well as Windows Server 2022 and Windows Server 2025 (including Server Core installations). These are all versions that use the built‑in USB Print Driver.

With a CVSS score of 7, the vulnerability is classified as medium severity. The EPSS score is not available and the issue is not listed in the CISA KEV catalog, indicating it is not widely abused yet. However, the attack vector is local; an attacker who can introduce a malicious USB printer or otherwise trigger the affected driver (for example through an authenticated user) could exploit the flaw. The potential impact includes full control over the affected system and compromise of all files, services, and network connections available to the system account.