This vulnerability (CVE-2026-23672) in the Windows Universal Disk Format File System Driver (UDFS) for Windows 10 Version 1607 (build 10.0.14393.0) is caused by an out-of-bounds read condition (CWE-125). Successful exploitation could lead to elevation of privilege, allowing an attacker with low privileges to execute code or perform actions with elevated rights. The CVSS v3.1 base score is 7.8 (high), reflecting the complexity and impact of the vulnerability. Microsoft has released an official fix to address this issue.

An attacker with limited privileges could exploit this out-of-bounds read vulnerability to elevate their privileges on the affected Windows 10 Version 1607 system. This could result in full control over the affected system, including the ability to execute arbitrary code, modify data, or disrupt system availability. No known exploits are reported in the wild at this time.

An official fix for this vulnerability is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23672 to remediate this issue. No additional mitigations are required beyond applying the official patch.