A use-after-free flaw exists in the Windows Client License Service that permits an attacker with local authorization to exploit the vulnerability and elevate privileges on the machine. The flaw occurs when a freed memory reference is accessed, enabling the attacker to manipulate internal data structures used by the service. Successful exploitation can grant the attacker unauthorized privileges, potentially allowing execution of arbitrary code with elevated rights and complete compromise of the system.

Microsoft Windows operating systems are impacted, specifically Windows 10 versions 1809, 21H2, 22H2, Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1, as well as Windows Server releases 2019, 2022, and 2025 (including Server Core installations).

The CVSS score of 7.8 indicates a high risk of successful exploitation when conditions are met. No EPSS score is available, but the vulnerability is not listed in the CISA KEV catalog, suggesting no currently known public exploits. The likely attack is a local privilege escalation that requires the attacker to be an authorized user with access to the targeted machine. While the exploit complexity is moderate given the UAF nature, the impact of gaining elevated privileges is significant, warranting prompt remediation.