This vulnerability involves a use-after-free condition in the Windows Runtime component of Microsoft Windows 11 Version 24H2 (build 10.0.26100.0). Exploitation requires local access with some privileges and does not require user interaction. Successful exploitation can lead to a complete compromise of confidentiality, integrity, and availability by elevating privileges locally. Microsoft has published an official fix to address this issue.

An authorized local attacker can exploit this use-after-free vulnerability to elevate their privileges, potentially gaining full control over the affected system. The vulnerability impacts confidentiality, integrity, and availability at a high level. There are no known exploits in the wild at the time of this report.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50413 to remediate this vulnerability.