Privilege escalation via kernel use-after-free

Use-after-free in the Windows Kernel in Microsoft Windows 11 24H2, 25H2, 26H1, and Windows Server 2025 allows local users to elevate privileges. Microsoft has disclosed only that the flaw is a use-after-free in the Windows Kernel and has not identified the affected subsystem, object lifetime mistake, or attacker-controlled operation that dereferences freed memory. Exploitation requires local low-privilege access and no user interaction; Microsoft's published CVSS 3.1 assessment indicates high attack complexity and full compromise of confidentiality, integrity, and availability on the affected host after successful elevation.