This vulnerability arises from improper input validation in the Windows Hyper-V feature on Windows 10 Version 1607 (build 10.0.14393.0). An attacker with local privileges and user interaction can exploit this flaw to execute arbitrary code on the affected system. The CVSS 3.1 base score is 7.3, reflecting high impact on confidentiality, integrity, and availability. Microsoft has published an official fix to remediate this vulnerability.

Successful exploitation allows an authorized attacker to execute arbitrary code locally, resulting in complete compromise of system confidentiality, integrity, and availability. This could enable privilege escalation or unauthorized system control within the affected environment.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32149 to remediate this vulnerability.