This vulnerability involves a heap-based buffer overflow in the Function Discovery Service component (fdwsd.dll) of Microsoft Windows 10 Version 1607 (build 10.0.14393.0). An authorized local attacker can exploit this flaw to elevate their privileges on the affected system. The CVSS v3.1 base score is 7.0, indicating high severity, with attack vector local, high attack complexity, low privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. Microsoft has released an official fix to address this vulnerability.

Successful exploitation allows an authorized local attacker to elevate privileges, potentially gaining higher system rights than intended. This could lead to full system compromise depending on the privileges escalated to. The vulnerability affects confidentiality, integrity, and availability of the system.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 to remediate this vulnerability. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32087 for detailed patch information and update instructions.