This vulnerability involves a use-after-free condition in the Windows Print Spooler components of Windows 11 Version 24H2 (build 10.0.26100.0). An authorized attacker with local access can exploit this flaw to elevate their privileges, potentially gaining higher system rights. The CVSS 3.1 vector indicates low attack complexity and privileges required, with no user interaction needed, and impacts confidentiality, integrity, and availability at a high level. Microsoft has published an official fix to remediate this issue.

Successful exploitation of this vulnerability allows an authorized local attacker to elevate privileges, potentially gaining administrative control over the affected system. This can lead to full system compromise, including unauthorized access to sensitive data and disruption of system availability.

An official fix is available from Microsoft. It is strongly recommended to apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33101 to remediate this vulnerability. No additional mitigation steps are indicated by the vendor.