This vulnerability involves a use-after-free condition in the Windows Print Spooler components on Windows 11 Version 24H2 (build 10.0.26100.0). An authorized attacker with local access can exploit this flaw to elevate their privileges, potentially gaining higher-level permissions than intended. The CVSS 3.1 vector indicates low attack complexity, low privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. Microsoft has published an official fix for this vulnerability, as detailed in their security update guide.

Successful exploitation of this vulnerability allows an authorized local attacker to elevate privileges, which could lead to full system compromise or unauthorized access to sensitive information. The impact affects confidentiality, integrity, and availability of the system. There are currently no known exploits in the wild, reducing immediate risk but the vulnerability remains critical until patched.

An official fix is available from Microsoft. It is recommended to apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33101 promptly to remediate this vulnerability. No additional mitigations are specified by the vendor.