This vulnerability (CVE-2026-32073) involves a use-after-free condition in the Windows Ancillary Function Driver for WinSock component of Windows 10 Version 1607 (build 10.0.14393.0). An authorized attacker with local access can exploit this flaw to elevate their privileges on the affected system. The CVSS v3.1 base score is 7.0, indicating high severity, with attack vector local, attack complexity high, privileges required low, and no user interaction needed. Microsoft has published an official fix to address this issue.

Successful exploitation of this vulnerability allows a local attacker with authorized access to elevate their privileges, potentially gaining higher-level system rights. This can lead to full system compromise, including confidentiality, integrity, and availability impacts as indicated by the CVSS vector (C:H/I:H/A:H). There are no known exploits in the wild at this time.

An official fix is available from Microsoft for this vulnerability. Users and administrators of Windows 10 Version 1607 (build 10.0.14393.0) should apply the security update provided by Microsoft as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32073 to remediate this issue.