This vulnerability (CVE-2026-32149) arises from improper input validation in the Windows Hyper-V feature on Windows 10 Version 1607 (build 10.0.14393.0). An attacker with local access and limited privileges can exploit this flaw to execute arbitrary code on the affected system. The CVSS 3.1 vector indicates local attack vector, low attack complexity, low privileges required, user interaction needed, and high impact on confidentiality, integrity, and availability. Microsoft has published an official fix to remediate this vulnerability.

Successful exploitation allows an authorized local attacker to execute arbitrary code, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability. This could enable privilege escalation or unauthorized actions within the Windows Hyper-V environment.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32149 to remediate this vulnerability. No additional mitigation steps are indicated by the vendor.