This vulnerability, tracked as CVE-2026-32224 and classified under CWE-416 (Use After Free), affects Windows 11 version 26H1 (build 10.0.28000.0). It exists in the Windows Server Update Service and can be exploited by an authorized local attacker to gain elevated privileges. The CVSS 3.1 vector indicates that the attack requires local access with high attack complexity and low privileges but no user interaction. Confidentiality, integrity, and availability impacts are all high. Microsoft has published an official fix for this vulnerability.

An authorized local attacker can exploit this use-after-free vulnerability to elevate their privileges on the affected Windows 11 system, potentially gaining higher-level access than intended. This could lead to full system compromise depending on the elevated privileges obtained. The vulnerability impacts confidentiality, integrity, and availability at a high level.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 11 version 26H1 (build 10.0.28000.0) as soon as possible to remediate this vulnerability. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32224 for detailed patch information and installation instructions.