This vulnerability is a use-after-free condition (CWE-416) in the Windows Autopilot component of Microsoft Windows 11 Version 24H2 (build 10.0.26100.0). It allows an attacker with local authorized access to elevate their privileges on the affected system. The CVSS v3.1 base score is 7.0, indicating high severity, with attack vector local, high attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. Microsoft has released an official fix for this vulnerability.

An authorized local attacker could exploit this use-after-free vulnerability to elevate privileges, potentially gaining higher-level access than intended. This could lead to full system compromise depending on the privileges gained. There are no known exploits in the wild at the time of publication.

Microsoft has released an official fix for this vulnerability. It is recommended to apply the security update provided by Microsoft as soon as possible to remediate this issue. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65781 for the official patch and update instructions.