This vulnerability involves a use-after-free condition in the Windows Ancillary Function Driver for WinSock on Windows 10 Version 1607 (build 10.0.14393.0). Exploitation requires local access with low privileges and no user interaction. The flaw could allow an attacker to elevate their privileges on the affected system. Microsoft has published an official fix to remediate this vulnerability.

Successful exploitation of this vulnerability could result in an attacker gaining elevated privileges on a vulnerable Windows 10 Version 1607 system. This could allow the attacker to execute code with higher privileges, potentially compromising system integrity, confidentiality, and availability. There are no reports of active exploitation in the wild.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26177 to remediate this vulnerability. No additional mitigation steps are indicated by the vendor.