This vulnerability involves the acceptance of extraneous untrusted data with trusted data in the Windows Component Object Model (COM) on Windows 10 Version 1809 (build 10.0.17763.0). The flaw enables an unauthorized local attacker to elevate privileges, potentially gaining higher system rights. The CVSS 3.1 base score is 8.4, indicating high severity, with attack vector local, low attack complexity, no privileges required, and no user interaction needed. Microsoft has released an official fix for this vulnerability as documented in their security update guide.

Successful exploitation allows a local attacker to elevate privileges, potentially leading to full system compromise including confidentiality, integrity, and availability impacts as indicated by the CVSS metrics (C:H/I:H/A:H). There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1809 to remediate this vulnerability. Refer to the Microsoft security update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32162 for detailed patch information and deployment instructions.