The vulnerability is a use‑after‑free flaw in the Windows USB Print Driver that permits an authorized local attacker to execute arbitrary code with elevated privileges. The flaw occurs when the driver frees a memory object before all handles are closed, allowing the attacker to manipulate the freed memory and trigger privileged execution. This can lead to complete system compromise by the attacker if they can grant themselves administrative rights.

Affected products include Microsoft Windows 10 21H2 and 22H2, Microsoft Windows 11 23H2, 24H2, 25H2, 26H2, 26H1, as well as Windows Server 2022 and Windows Server 2025 (including Server Core installations). All listed builds are impacted by the flaw.

The CVSS score of 7 indicates a medium‑to‑high severity risk. No EPSS data is available, and the vulnerability is not in the CISA KEV catalog, suggesting a lower probability of widespread exploitation but still a serious local privilege escalation. The attack requires local authorization and operates via a use‑after‑free condition, meaning a user must have some level of system access to trigger the exploit. If the vulnerability is exploited, the attacker can elevate their privileges to system or administrative level, potentially compromising all data and services on the affected machine.