This vulnerability (CVE-2026-45605) involves a use-after-free condition in the Windows Bluetooth Service component of Windows 10 Version 1607 (build 10.0.14393.0). An authorized attacker with local access can exploit this flaw to elevate their privileges on the affected system. The vulnerability is tracked under CWE-416 and has a CVSS v3.1 base score of 7.8, indicating high impact on confidentiality, integrity, and availability. Microsoft has released an official fix for this issue as documented in their security update guide.

Successful exploitation allows an authorized local attacker to elevate privileges, potentially gaining higher-level access to the system. This can lead to full system compromise depending on the privileges escalated. The vulnerability affects confidentiality, integrity, and availability of the system.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 to remediate this vulnerability. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45605 for update details and installation instructions.