This vulnerability involves acceptance of extraneous untrusted data with trusted data within the Windows Component Object Model (COM) in Windows 10 Version 1809 (build 10.0.17763.0). The weakness is classified under CWE-349, indicating improper acceptance of untrusted input alongside trusted input. Exploitation can lead to local privilege escalation. The CVSS v3.1 base score is 8.4, reflecting high impact on confidentiality, integrity, and availability. Microsoft has published an official fix for this vulnerability.

Successful exploitation allows a local attacker without privileges to elevate their permissions, potentially gaining full control over the affected system. This impacts confidentiality, integrity, and availability of the system. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32162. No additional mitigation steps are indicated by the vendor.