This vulnerability (CVE-2026-27914) affects Microsoft Windows 10 Version 1607 (build 10.0.14393.0) and is classified under CWE-284 (Improper Access Control). It arises from insufficient access control checks within the Microsoft Management Console, enabling an authorized local user to elevate privileges. The CVSS v3.1 score is 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), reflecting that the attack requires local access with low complexity and no user interaction, but can result in full compromise of confidentiality, integrity, and availability. Microsoft has issued an official fix for this vulnerability as documented in their security update guide.

An authorized local attacker can exploit this vulnerability to elevate their privileges on the affected Windows 10 Version 1607 system. This can lead to full compromise of system confidentiality, integrity, and availability, allowing the attacker to perform actions normally restricted to higher-privileged accounts.

An official fix is available from Microsoft to remediate this vulnerability. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27914 as soon as possible to mitigate the risk. No additional mitigation steps are indicated by the vendor advisory.