This vulnerability arises from a type confusion error in the Windows Ancillary Function Driver for WinSock on Windows 10 Version 1607 (build 10.0.14393.0). An authorized local attacker can exploit this flaw to elevate privileges, potentially gaining higher system rights. The CVSS v3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. Microsoft has published an official fix to remediate the vulnerability, as detailed in their security update guide.

Successful exploitation allows an authorized local attacker to elevate privileges, potentially leading to full control over the affected system. The vulnerability impacts confidentiality, integrity, and availability with high severity. There are no reports of active exploitation in the wild.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34344 to remediate this vulnerability. No additional mitigation steps are indicated by the vendor.