CVE-2026-78457: CWE-416: Use After Free in Microsoft Windows 11 Version 24H2

This vulnerability (CVE-2026-78457) involves a use-after-free condition in the Windows Security Health Service component of Microsoft Windows 11 Version 24H2. An authorized attacker with local access can exploit this flaw to elevate their privileges on the affected system. The issue is tracked under CWE-416 (Use After Free). The vulnerability affects multiple builds of Windows 11 Version 24H2 as specified by the affected version ranges. Microsoft has published an official fix to address this vulnerability.

Successful exploitation allows an authorized local attacker to elevate privileges, potentially gaining higher-level access and control over the affected system. The vulnerability impacts confidentiality, integrity, and availability as indicated by the CVSS vector (C:H/I:H/A:H). There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for Windows 11 Version 24H2 to remediate this vulnerability. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78457 for detailed patch information and update instructions.