This vulnerability involves a use-after-free condition in the Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) on Windows 10 Version 1607 (build 10.0.14393.0). Exploitation requires local access with low privileges and no user interaction. Successful exploitation could lead to elevation of privileges, allowing the attacker to gain higher-level permissions on the system. Microsoft has published an official fix to remediate this vulnerability.

An authorized local attacker can exploit this use-after-free vulnerability to elevate their privileges on the affected Windows 10 Version 1607 system. This could enable the attacker to execute code with higher privileges, potentially compromising system integrity, confidentiality, and availability. There are no known exploits in the wild at this time.

An official fix is available from Microsoft for this vulnerability. Users and administrators should apply the security update provided by Microsoft as soon as possible to remediate the issue. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27917 for detailed patch information and deployment guidance.