This vulnerability is a double free condition (CWE-415) in the Microsoft Brokering File System component of Windows 11 Version 24H2 (build 10.0.26100.0). An authorized local attacker with low privileges can exploit this flaw to elevate their privileges, potentially gaining higher system rights. The CVSS v3.1 base score is 7.0, indicating a high severity with impacts on confidentiality, integrity, and availability. Microsoft has released an official fix to address this issue.

Successful exploitation of this vulnerability allows a local attacker with authorized access and low privileges to elevate their privileges on the affected Windows 11 system. This can lead to full system compromise, affecting confidentiality, integrity, and availability of the system. There are no reports of active exploitation in the wild.

Microsoft has released an official fix for this vulnerability. It is strongly recommended to apply the available security update from Microsoft as soon as possible to remediate this issue. Since this is a local privilege escalation vulnerability, applying the patch will prevent attackers from exploiting this flaw. No additional mitigation steps are indicated by the vendor advisory.