This vulnerability (CWE-416) involves a use-after-free condition in the Windows Autopilot component of Microsoft Windows 11 Version 24H2 (build 10.0.26100.0). An authorized attacker with local access can exploit this flaw to elevate their privileges on the affected system. The CVSS v3.1 vector indicates the attack requires local access with high attack complexity and low privileges but no user interaction. The impact includes high confidentiality, integrity, and availability impacts. Microsoft has published an official fix to address this issue.

An authorized local attacker can exploit this use-after-free vulnerability to elevate privileges, potentially gaining higher system rights than initially granted. This could lead to unauthorized access to sensitive information, modification of system data, or disruption of system availability.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 11 Version 24H2 (build 10.0.26100.0) as soon as possible to remediate this vulnerability. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65783 for update details and installation instructions.