This vulnerability involves a concurrent execution issue using shared resources without proper synchronization in the Windows User Interface Core component of Windows 10 Version 1607 (build 10.0.14393.0). An authorized local attacker can exploit this race condition to elevate privileges on the affected system. The CVSS v3.1 score is 7.8, indicating high severity with high impact on confidentiality, integrity, and availability. Microsoft has published an official fix to address this vulnerability.

Successful exploitation allows an authorized local attacker to elevate their privileges, potentially gaining higher-level access to the system. This can lead to full system compromise depending on the privileges gained. The vulnerability affects confidentiality, integrity, and availability of the system.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27911 to remediate this vulnerability.