This vulnerability involves a use-after-free condition in the Windows Universal Plug and Play (UPnP) Device Host on Windows 10 Version 1607 (build 10.0.14393.0). Exploitation requires local access with some level of authorization and can lead to privilege escalation. The CVSS 3.1 vector indicates low attack complexity, low privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. Microsoft has released an official fix to remediate this vulnerability.

An authorized local attacker can exploit this use-after-free vulnerability to elevate privileges, potentially gaining higher system rights than intended. This can lead to full system compromise depending on the privileges escalated. The vulnerability affects confidentiality, integrity, and availability of the system.

Microsoft has released an official fix for this vulnerability. Users and administrators should apply the provided security update from the Microsoft Security Response Center to remediate this issue. No additional mitigation steps are indicated by the vendor advisory.