This vulnerability (CVE-2026-47648) is classified as CWE-426 (Untrusted Search Path) affecting Windows Storage in Microsoft Windows 10 Version 1607 (build 10.0.14393.0). It allows a local attacker with authorized access to elevate privileges by exploiting the untrusted search path behavior. The CVSS 3.1 vector indicates that the attack requires local access with high attack complexity and low privileges, but results in high impact on confidentiality, integrity, and availability. Microsoft has released an official fix for this vulnerability as documented in their security update guide.

An authorized local attacker can exploit this vulnerability to elevate their privileges on the affected system, potentially gaining higher-level access than intended. This can lead to full system compromise, affecting confidentiality, integrity, and availability of the system.

An official fix is available from Microsoft. It is recommended to apply the security update provided by Microsoft for Windows 10 Version 1607 (build 10.0.14393.0) as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47648. No additional mitigation steps are indicated beyond applying the official patch.