This vulnerability, identified as CVE-2026-33838 and classified under CWE-415 (Double Free), affects Windows 10 Version 1607 (build 10.0.14393.0). The issue arises from improper handling of memory in Windows Message Queuing, leading to a double free condition. Exploiting this flaw enables an attacker with local authorized access to escalate their privileges on the affected system. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with high impact on confidentiality, integrity, and availability. Microsoft has released an official fix to remediate this vulnerability.

An authorized local attacker can exploit this double free vulnerability to elevate privileges, potentially gaining higher-level access than intended. The impact includes full compromise of confidentiality, integrity, and availability of the affected system components related to Windows Message Queuing.

An official fix is available from Microsoft. It is recommended to apply the vendor-provided patch as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33838. Applying this update will remediate the vulnerability and prevent exploitation.