This vulnerability, identified as CWE-501 (Trust Boundary Violation), exists in the Windows Attestation feature of Windows 10 Version 1607 (build 10.0.14393.0). It permits an attacker with local authorized access to escalate privileges, potentially gaining higher-level system permissions. The CVSS v3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. Microsoft has published an official fix to remediate this vulnerability.

An authorized local attacker can exploit this trust boundary violation to elevate privileges on the affected Windows 10 Version 1607 system. This could lead to full system compromise, including unauthorized access to sensitive data and system control. There are no known exploits in the wild at this time.

Apply the official patch provided by Microsoft as referenced in their security update guide (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33828). This fix addresses the trust boundary violation and mitigates the privilege escalation risk. No additional mitigation steps are indicated by the vendor.