This vulnerability, tracked as CVE-2026-45656 and classified under CWE-693 (Protection Mechanism Failure), affects Windows 10 Version 1607 (build 10.0.14393.0). It allows an authorized local attacker to bypass a security feature in the Windows UEFI environment. The CVSS v3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, low privileges required, and no user interaction needed. The impact includes high confidentiality, integrity, and availability impacts. Microsoft has published an official fix to remediate this vulnerability.

An authorized local attacker can bypass a security feature in Windows UEFI, which may lead to complete compromise of confidentiality, integrity, and availability of the affected system. This could allow unauthorized actions that undermine system security controls.

Microsoft has released an official fix for this vulnerability. Users and administrators should apply the provided security update from the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45656 to remediate the issue.