This vulnerability involves an untrusted pointer dereference leading to a heap-based buffer overflow in the Windows Cloud Files Mini Filter Driver component of Windows 10 Version 1607. An attacker with local authorized access can exploit this flaw to elevate their privileges on the affected system. The issue is tracked as CWE-822. Microsoft has published an official fix to address this vulnerability.

Successful exploitation allows an authorized local attacker to gain elevated privileges, potentially leading to full system compromise. The vulnerability affects confidentiality, integrity, and availability with high impact as indicated by the CVSS vector (C:H/I:H/A:H). No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20940 to remediate this vulnerability.