This vulnerability involves a heap-based buffer overflow in the NTFS file system driver of Windows 10 Version 1607 (build 10.0.14393.0). An attacker with local access and user interaction can exploit this flaw to execute arbitrary code, potentially leading to full system compromise. The vulnerability is tracked as CWE-122 (Heap-based Buffer Overflow). Microsoft has published an official security update to address this issue.

Successful exploitation allows an unauthorized local attacker to execute arbitrary code on the affected system with elevated privileges, potentially leading to full compromise of confidentiality, integrity, and availability of the system. The CVSS v3.1 base score is 7.8 (High), reflecting the significant impact on confidentiality, integrity, and availability.

An official security update from Microsoft is available and should be applied to affected systems to remediate this vulnerability. Administrators should follow the guidance in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45636 to deploy the patch. No additional mitigations are specified by the vendor.