This vulnerability involves a use-after-free condition in the Windows Ancillary Function Driver for WinSock on Windows 10 Version 1607 (build 10.0.14393.0). Exploiting this flaw could allow an authorized local attacker to elevate their privileges on the affected system. The CVSS v3.1 base score is 7.0, indicating high severity, with attack vector local, high attack complexity, and requiring low privileges but no user interaction. Microsoft has released an official fix to address this issue.

Successful exploitation of this vulnerability could result in an attacker gaining elevated privileges locally on a vulnerable Windows 10 Version 1607 system. This could allow the attacker to execute code with higher privileges, potentially leading to full system compromise or unauthorized access to sensitive resources.

Microsoft has released an official fix for this vulnerability. Users and administrators should apply the available security updates for Windows 10 Version 1607 as provided in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42911 to remediate this issue.