This vulnerability (CVE-2025-62565) is classified as CWE-416 (Use After Free) and affects Microsoft Windows 10 Version 1607 (build 10.0.14393.0). It involves improper handling of memory in the Windows Shell, which can be exploited by an authorized local attacker to gain elevated privileges. The CVSS v3.1 vector indicates the attack requires local access with low complexity, privileges, and user interaction, but results in high impact on confidentiality, integrity, and availability. The vulnerability has been officially published and a patch is available from Microsoft.

Successful exploitation of this vulnerability allows an authorized local attacker to elevate their privileges, potentially gaining higher system rights than intended. This can lead to full system compromise, including unauthorized access to sensitive data and disruption of system operations. No known exploits are currently reported in the wild.

A patch is available for this vulnerability. It is recommended to apply the official Microsoft update for Windows 10 Version 1607 to remediate this issue. Since this is not a cloud service, remediation depends on applying the patch to affected systems. No additional vendor advisory content is provided, so check Microsoft's official security update channels for the latest patch information.