CVE-2026-40697 is a use-after-free vulnerability in certain Intel Wireless Software for Windows running in Ring 3 user applications. It allows an unprivileged authenticated local user to cause a denial of service under conditions requiring high attack complexity and no user interaction. The vulnerability impacts system availability primarily, with low impact on integrity and no impact on confidentiality.