This vulnerability involves a use-after-free condition in the Windows Ancillary Function Driver for WinSock component on Windows 10 Version 1607 (build 10.0.14393.0). An authorized attacker with local access can exploit this flaw to elevate their privileges on the affected system. The CVSS v3.1 base score is 7.0, indicating high severity, with attack vector local, high attack complexity, low privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. The vulnerability has been publicly disclosed and a patch is available from Microsoft.

Successful exploitation allows an authorized local attacker to elevate privileges, potentially gaining higher-level access to the system. This can lead to full system compromise, including unauthorized access to sensitive data and disruption of system availability. There are no reports of active exploitation in the wild.

A patch is available from Microsoft to remediate this vulnerability. It is recommended to apply the official update for Windows 10 Version 1607 as soon as possible to mitigate the risk. Since this is a local privilege escalation vulnerability, restricting local access to trusted users also reduces risk.