This vulnerability, identified as CVE-2026-20832 and classified under CWE-415 (Double Free), affects Windows 10 Version 1607 (build 10.0.14393.0). The issue exists in the Windows Remote Procedure Call IDL component, where improper handling of memory leads to a double free condition. Exploitation could result in elevation of privilege, allowing an attacker with low privileges to gain higher privileges. The CVSS 3.1 base score is 7.8 (high), reflecting the potential impact on confidentiality, integrity, and availability. Microsoft has released an official fix to address this vulnerability, as detailed in their security advisory.

Successful exploitation of this vulnerability could allow an attacker with limited privileges to elevate their privileges on the affected Windows 10 Version 1607 system. This could lead to full control over the system, compromising confidentiality, integrity, and availability.

An official fix is available from Microsoft for this vulnerability. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20832 to remediate this issue.