This vulnerability is a double free condition in the Microsoft Brokering File System component of Windows 11 Version 24H2 (build 10.0.26100.0). A double free occurs when the same memory is freed twice, potentially leading to memory corruption. An authorized local attacker can exploit this flaw to elevate privileges, gaining higher system rights than intended. The vulnerability has a CVSS 3.1 base score of 7.0 with attack vector local, high attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. Microsoft has released an official fix to remediate this issue.

Successful exploitation allows an authorized local attacker to elevate privileges on the affected Windows 11 system, potentially gaining administrative rights. This can lead to full control over the system, compromising confidentiality, integrity, and availability of data and system resources.

An official fix is available from Microsoft. It is strongly recommended to apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32219 to remediate this vulnerability. No additional mitigation steps are indicated by the vendor.