This vulnerability involves a race condition (CWE-362) in the Windows User Interface Core component of Windows 10 Version 1809 (build 10.0.17763.0). Improper synchronization when accessing shared resources can be exploited by a local attacker with limited privileges to elevate their privileges on the affected system. The vulnerability is confirmed and publicly disclosed with a CVSS 3.1 score of 7.8, indicating high impact on confidentiality, integrity, and availability. Microsoft has released an official patch to remediate this issue.

Successful exploitation allows an authorized local attacker to elevate privileges, potentially gaining higher-level access to the system. This can lead to full compromise of the affected Windows 10 system's confidentiality, integrity, and availability. There are no known exploits in the wild at the time of disclosure.

An official fix is available from Microsoft. It is strongly recommended to apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32163 to remediate this vulnerability. No additional mitigation steps are indicated by the vendor.