This vulnerability (CVE-2026-35416) is a use-after-free condition caused by accessing a resource using an incompatible type (type confusion) in the Windows Ancillary Function Driver for WinSock on Windows 10 Version 1607 (build 10.0.14393.0). An authorized attacker with local access can exploit this flaw to elevate their privileges on the affected system. The CVSS v3.1 base score is 7.0, indicating high severity, with attack vector local, attack complexity high, and privileges required low. Microsoft has published an official fix for this vulnerability.

Successful exploitation allows an authorized local attacker to elevate privileges, potentially gaining higher system rights than intended. This could lead to full system compromise depending on the privileges gained.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35416 to remediate this vulnerability.