This vulnerability (CVE-2026-33827) involves a race condition (CWE-362) in the Windows TCP/IP stack of Windows 10 Version 1607 (build 10.0.14393.0). Improper synchronization during concurrent execution of shared resources can be exploited by an unauthenticated attacker to execute arbitrary code remotely. The vulnerability is rated high severity with a CVSS 3.1 base score of 8.1, reflecting network attack vector, high impact on confidentiality, integrity, and availability, and requiring no privileges or user interaction. Microsoft has published an official fix to remediate this issue.

Successful exploitation allows remote code execution without authentication, potentially leading to full system compromise. The vulnerability affects confidentiality, integrity, and availability of the affected system. No known exploits in the wild have been reported at this time.

An official patch is available from Microsoft to remediate this vulnerability. Users and administrators should apply the update provided in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33827 to protect affected systems. No additional mitigation steps are indicated by the vendor.