This vulnerability (CVE-2026-40369) is classified under CWE-822 (Untrusted Pointer Dereference) and affects Windows 11 Version 24H2 (build 10.0.26100.0). It allows a local attacker with some level of authorization to exploit a flaw in the Windows Kernel by dereferencing an untrusted pointer, leading to privilege escalation. The CVSS v3.1 base score is 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. Microsoft has issued an official fix for this vulnerability, as documented in their security update guide.

Successful exploitation enables an authorized local attacker to elevate privileges on the affected system, potentially gaining full control. This can compromise system confidentiality, integrity, and availability. No remote or user interaction requirements are indicated beyond local authorization. No known active exploits have been reported.

An official fix is available from Microsoft and should be applied promptly to affected Windows 11 Version 24H2 systems. Refer to the Microsoft Security Update Guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40369 for patch details and installation instructions. No additional mitigations are specified by the vendor.