This vulnerability is a double free condition in the Windows Link-Layer Discovery Protocol (LLDP) component of Windows 10 Version 1607 (build 10.0.14393.0). A double free occurs when the system attempts to free the same memory location twice, which can lead to memory corruption and potentially allow an authorized local attacker to escalate privileges. The CVSS v3.1 vector indicates that the attack requires local access with high attack complexity and low privileges, but no user interaction. The impact includes high confidentiality, integrity, and availability consequences. Microsoft has published an official fix for this vulnerability.

An authorized local attacker can exploit this double free vulnerability to elevate privileges on the affected Windows 10 system. Successful exploitation could lead to full system compromise, affecting confidentiality, integrity, and availability of the system. There are no known exploits in the wild at this time.

An official patch is available from Microsoft to remediate this vulnerability. Users and administrators should apply the update provided in the Microsoft security advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34341 to protect affected systems. Since this is a local privilege escalation vulnerability, limiting local access to trusted users also reduces risk until the patch is applied.