This vulnerability (CVE-2026-62788) is a use-after-free condition in the Windows Kernel component of Windows 11 version 23H2 (build 10.0.22631.0). Exploitation requires local access with authorized privileges and can result in privilege escalation. The CVSS 3.1 vector indicates the attack requires local access (AV:L), high attack complexity (AC:H), low privileges (PR:L), no user interaction (UI:N), unchanged scope (S:U), and impacts confidentiality, integrity, and availability with high severity (C:H/I:H/A:H). Microsoft has published an official fix for this vulnerability.

An authorized local attacker can exploit this use-after-free vulnerability in the Windows Kernel to elevate their privileges, potentially gaining higher system rights. This could lead to full system compromise depending on the attacker's goals and environment. The vulnerability affects confidentiality, integrity, and availability at a high level.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 11 version 23H2 (build 10.0.22631.0) as soon as possible to remediate this vulnerability. Refer to the Microsoft security advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62788 for update details and guidance.