This vulnerability is a double free condition in the Windows Projected File System component of Windows 10 Version 1809 (build 10.0.17763.0). A double free occurs when the system attempts to free the same memory location twice, which can lead to memory corruption and potentially allow an authorized local attacker to escalate privileges on the affected system. The CVSS 3.1 vector indicates the attack requires local access with low complexity and no user interaction, and successful exploitation results in high impact on confidentiality, integrity, and availability. Microsoft has published an official fix for this vulnerability.

Successful exploitation of this vulnerability allows an authorized local attacker to elevate privileges, potentially gaining higher system rights than intended. This can compromise system confidentiality, integrity, and availability. There are no reports of active exploitation in the wild, but the impact severity is high due to the nature of privilege escalation.

An official fix is available from Microsoft. Users and administrators of Windows 10 Version 1809 (build 10.0.17763.0) should apply the security update provided by Microsoft as detailed in their advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32069. Applying this patch will remediate the vulnerability. No additional mitigation steps are indicated by the vendor.