This vulnerability, tracked as CVE-2026-65782, involves a use-after-free condition in the Windows Autopilot component of Microsoft Windows 11 Version 24H2 (build 10.0.26100.0). An authorized attacker with local access can exploit this flaw to elevate their privileges on the affected system. The CVSS v3.1 base score is 7.0, indicating high severity, with attack vector local, high attack complexity, low privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. Microsoft has released an official fix for this vulnerability.

An authorized local attacker can exploit this use-after-free vulnerability to elevate privileges, potentially gaining higher-level access than intended. This could lead to full system compromise, including unauthorized access to sensitive data and control over system functions. The vulnerability affects confidentiality, integrity, and availability of the system.

Microsoft has released an official fix for this vulnerability. It is recommended to apply the security update provided by Microsoft for Windows 11 Version 24H2 (build 10.0.26100.0) as soon as possible to remediate this issue. No additional mitigations are indicated by the vendor advisory.