This vulnerability (CVE-2025-59517) affects the Windows Storage VSP Driver in Windows 10 Version 1607 (build 10.0.14393.0). It is classified under CWE-284 (Improper Access Control) and allows a local attacker with some level of authorization to escalate privileges on the affected system. The CVSS 3.1 vector indicates local attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. The vulnerability is publicly disclosed and a patch is available from Microsoft.

An authorized local attacker can exploit this vulnerability to elevate their privileges, potentially gaining higher-level access than intended. This can lead to full system compromise, including unauthorized access to sensitive data and disruption of system operations. The high CVSS score reflects the critical nature of the impact on confidentiality, integrity, and availability.

A patch is available for this vulnerability. It is recommended to apply the official Microsoft update for Windows 10 Version 1607 to remediate this issue. Since this is a local privilege escalation vulnerability, applying the patch will effectively mitigate the risk. No additional vendor advisories indicate alternative mitigations or that no action is required.