The vulnerability is a use‑after‑free bug in the Windows Search component that allows an authorized local attacker to gain higher privileges on the compromised host. Exploitation of this flaw can lead to execution of arbitrary code with elevated rights, thereby compromising confidentiality, integrity, and availability of the system. The weakness is identified as CWE‑416, indicating a dereference of a freed pointer.

Affected products include Microsoft Windows 10 (builds 1607, 1809, 21H2, 22H2), Microsoft Windows 11 (builds 23H2, 24H2, 25H2, 26H2, 26H1), and multiple Windows Server releases: 2012, 2012 R2, 2016, 2019, 2022, 2025 – all versions listed by the CNA.

The CVSS score of 7.8 categorizes this flaw as high severity, but the EPSS score is not available and it does not appear in the CISA KEV catalog. Because the flaw requires an authenticated attacker with local access, the likelihood of widespread exploitation is moderate. In environments where the Windows Search component is used extensively, the attack surface is larger. Absence of publicly available exploits suggests current risk is primarily from threat actors capable of tail‑gating or establishing local footholds.