This vulnerability (CVE-2026-26162) is a type confusion flaw (CWE-843) in the Windows Object Linking and Embedding (OLE) component of Windows 10 Version 1607 (build 10.0.14393.0). It allows a local attacker with some level of authorization to elevate their privileges by accessing resources with incompatible types. The CVSS 3.1 base score is 7.8, indicating a high severity with high impact on confidentiality, integrity, and availability. Microsoft has published an official fix for this vulnerability.

Successful exploitation of this vulnerability can lead to local privilege escalation, allowing an attacker to gain higher privileges on the affected system. This can compromise system confidentiality, integrity, and availability. There are no reports of active exploitation in the wild.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26162 to remediate this vulnerability. No additional mitigation steps are indicated by the vendor.