This vulnerability involves a double free condition in the Windows Rich Text Edit Control component of Windows 10 Version 1607 (build 10.0.14393.0). A double free occurs when the same memory is freed twice, potentially leading to memory corruption. Exploiting this flaw could allow a local attacker with limited privileges and user interaction to elevate their privileges on the affected system. Microsoft has published an official fix to remediate this vulnerability.

Successful exploitation of this vulnerability could result in local privilege escalation, allowing an attacker with authorized access to gain higher privileges on the affected system. This could compromise system integrity and security. The CVSS vector indicates that exploitation requires local access, high attack complexity, limited privileges, and user interaction, but results in high confidentiality, integrity, and availability impact.

An official fix is available from Microsoft for this vulnerability. It is recommended to apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32170 to remediate this issue. Since the patch is officially released, applying it will mitigate the risk of exploitation.