This vulnerability (CVE-2026-35417) is a type confusion issue classified under CWE-843 in the Windows Win32K subsystem (ICOMP) on Windows 10 Version 1809 (build 10.0.17763.0). It enables an authorized local attacker to elevate privileges by exploiting improper handling of resource types. The CVSS v3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, and no user interaction required. Microsoft has published an official fix to remediate this issue.

Successful exploitation allows a local attacker with authorized access to elevate their privileges on the affected system, potentially gaining higher-level permissions. This can lead to full system compromise depending on the privileges escalated. There are no reports of active exploitation in the wild.

An official patch is available from Microsoft to remediate this vulnerability. Users and administrators should apply the update provided in the Microsoft security advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35417 as soon as possible to mitigate the risk. No additional mitigation steps are indicated by the vendor.