This vulnerability (CVE-2026-27922) involves a use-after-free condition in the Windows Ancillary Function Driver for WinSock on Windows 10 Version 1607 (build 10.0.14393.0). Exploitation requires local access with authorized privileges and can result in privilege escalation. The CVSS 3.1 vector indicates that the attack requires local access with high attack complexity and low privileges, but no user interaction. Successful exploitation impacts confidentiality, integrity, and availability with high severity. Microsoft has released an official fix to remediate this vulnerability.

An authorized local attacker can exploit this use-after-free vulnerability to elevate their privileges on the affected Windows 10 Version 1607 system. This could allow the attacker to gain higher-level access than intended, potentially compromising system confidentiality, integrity, and availability. There are no known exploits in the wild at this time.

Microsoft has released an official patch to address this vulnerability. It is recommended to apply the provided security update from the Microsoft Security Response Center as soon as possible to remediate the issue. No additional mitigation steps are indicated by the vendor advisory.