This vulnerability, tracked as CVE-2026-26170, arises from improper input validation in Microsoft PowerShell on Windows 10 Version 1607 (build 10.0.14393.0). It enables an attacker with local authorized access to escalate privileges, potentially gaining higher system rights. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. Microsoft has released an official patch to remediate this issue, as documented in their security update guide.

An authorized local attacker can exploit this vulnerability to elevate privileges on the affected Windows 10 system, potentially gaining full control and compromising confidentiality, integrity, and availability of the system.

Apply the official security update provided by Microsoft as detailed in their advisory (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26170). This patch fully addresses the improper input validation vulnerability in PowerShell. No additional mitigation steps are required beyond applying the official fix.