This vulnerability (CVE-2026-27910) affects Windows 10 Version 1607 (build 10.0.14393.0) and involves improper handling of insufficient permissions or privileges within the Windows Installer. It enables an authorized local attacker to elevate their privileges, potentially gaining higher system rights than intended. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) reflects that the attack requires local access with low complexity and privileges but no user interaction, and can result in high impact on confidentiality, integrity, and availability. Microsoft has released an official fix to remediate this vulnerability.

Successful exploitation allows a local authorized attacker to elevate their privileges on the affected Windows 10 system, potentially leading to full system compromise with high impact on confidentiality, integrity, and availability of the system. There are no known exploits in the wild at this time.

An official fix is available from Microsoft to address this vulnerability. Users and administrators should apply the provided security update from the Microsoft Security Response Center as soon as possible. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27910 for detailed patching instructions.