This vulnerability involves a heap-based buffer overflow in the DNS functionality of Microsoft Windows 10 Version 1607 (build 10.0.14393.0). An attacker with local authorized access can exploit this flaw to elevate their privileges. The CVSS v3.1 base score is 7.0, indicating high severity, with attack vector local, attack complexity high, and privileges required low. Microsoft has released an official fix addressing this issue.

Successful exploitation allows an authorized local attacker to elevate privileges, potentially gaining higher-level access on the affected Windows 10 system. This could lead to full system compromise depending on the privileges gained.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft as soon as possible to remediate this vulnerability. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41108 for update details and guidance.