This vulnerability (CVE-2026-34345) is a race condition (CWE-362) in the Windows Ancillary Function Driver for WinSock in Windows 10 Version 1607 (build 10.0.14393.0). The flaw arises from accessing a resource using an incompatible type, leading to type confusion. Exploitation requires local authorized access and can result in privilege escalation. The CVSS 3.1 base score is 7.0, reflecting high impact on confidentiality, integrity, and availability. Microsoft has released an official fix for this vulnerability as documented in their security update guide.

An authorized local attacker can exploit this race condition to elevate privileges on the affected Windows 10 Version 1607 system. Successful exploitation compromises system confidentiality, integrity, and availability at a high severity level. There are no known exploits in the wild at the time of publication.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34345 to remediate this vulnerability.