This vulnerability (CVE-2026-26179) is a double free condition in the Windows Kernel of Windows 11 version 22H3 (build 10.0.22631.0). A double free occurs when the system attempts to free the same memory location twice, potentially leading to memory corruption. An authorized local attacker can exploit this flaw to elevate privileges, gaining higher access rights on the affected system. The vulnerability has been assigned a CVSS 3.1 base score of 7.8, reflecting high impact with low attack complexity and requiring local privileges. Microsoft has released an official fix to remediate this issue, as documented in their security update guide.

Successful exploitation allows a local authorized attacker to elevate privileges, potentially gaining full control of the affected system. The impact affects confidentiality, integrity, and availability of the system due to the kernel-level nature of the flaw. There are no reports of active exploitation in the wild.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft as soon as possible to remediate this vulnerability. Refer to the Microsoft security update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26179 for detailed patch information and deployment instructions.