This vulnerability (CVE-2026-32152) involves a use-after-free condition in the Desktop Window Manager on Windows 11 version 22H3 (build 10.0.22631.0). An authorized attacker with local access can exploit this flaw to elevate their privileges, potentially gaining higher system rights. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. Microsoft has published an official security update to remediate this issue.

Successful exploitation allows an authorized local attacker to elevate privileges, potentially leading to full system compromise or unauthorized access to sensitive information. The vulnerability affects confidentiality, integrity, and availability of the system. There are no reports of active exploitation in the wild.

An official fix is available from Microsoft. Administrators and users should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32152 to remediate this vulnerability. No additional mitigation steps are indicated by the vendor.