This vulnerability, identified as CVE-2026-26162, is a type confusion issue (CWE-843) in the Windows Object Linking and Embedding (OLE) component of Windows 10 Version 1607 (build 10.0.14393.0). It allows a local attacker with some level of authorization to elevate their privileges by exploiting improper handling of resource types. The vulnerability has been assigned a CVSS 3.1 base score of 7.8, reflecting high severity with local attack vector, low attack complexity, and no user interaction required. Microsoft has released an official patch to remediate this vulnerability.

Successful exploitation of this vulnerability could allow an authorized local attacker to elevate their privileges on the affected Windows 10 Version 1607 system. This elevation could lead to full control over the system, impacting confidentiality, integrity, and availability of the affected system. There are no reports of active exploitation in the wild.

An official fix is available from Microsoft to address this vulnerability. Users and administrators should apply the security update provided by Microsoft as soon as possible. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26162 for detailed patch information and installation instructions.