This vulnerability involves improper validation of the specified type of input in the Windows Ancillary Function Driver for WinSock on Windows 10 Version 1607 (build 10.0.14393.0). It allows an authorized local attacker to elevate privileges, potentially gaining higher system rights. The CVSS 3.1 base score is 7.0, indicating high severity, with attack vector local, high attack complexity, low privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. Microsoft has published an official fix to address this issue.

An authorized local attacker can exploit this vulnerability to elevate their privileges on the affected Windows 10 Version 1607 system. This could lead to full control over the system, affecting confidentiality, integrity, and availability of the system and data.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25179 to remediate this vulnerability.