This vulnerability (CVE-2025-21287) affects Windows 10 Version 1507 (build 10.0.10240.0) and is classified under CWE-269 (Improper Privilege Management). It involves a flaw in the Windows Installer that could allow an attacker with low privileges to elevate their privileges to a higher level, potentially leading to full system compromise. The CVSS 3.1 base score is 7.8, indicating a high severity with local attack vector, low attack complexity, no user interaction required, and impacts confidentiality, integrity, and availability. Microsoft has published an official fix for this vulnerability.

Successful exploitation of this vulnerability could allow an attacker with limited privileges on the affected Windows 10 Version 1507 system to elevate their privileges to a higher level, potentially gaining administrative control. This could lead to full system compromise, including unauthorized access to sensitive data, system modification, and disruption of system availability.

An official fix is available from Microsoft for this vulnerability. It is recommended to apply the security update provided by Microsoft as detailed in their advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21287. No additional mitigation steps are indicated beyond applying the official patch.