This vulnerability involves a use-after-free condition in the Windows Ancillary Function Driver for WinSock on Windows 10 Version 1607 (build 10.0.14393.0). An authorized local attacker could exploit this flaw to elevate their privileges, potentially gaining higher-level access on the affected system. The CVSS 3.1 vector indicates the attack requires local access with high attack complexity and low privileges but no user interaction. The impact includes high confidentiality, integrity, and availability consequences. Microsoft has published an official fix to remediate this vulnerability.

Successful exploitation allows an authorized local attacker to elevate privileges, potentially compromising system confidentiality, integrity, and availability. This could enable the attacker to execute code with higher privileges or perform unauthorized actions on the affected Windows 10 Version 1607 system.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33100 to remediate this vulnerability. No additional mitigation steps are indicated by the vendor advisory.