This vulnerability, identified as CWE-426 (Untrusted Search Path), exists in Windows Storage on Windows 10 Version 1607 (build 10.0.14393.0). It allows an authorized local attacker to elevate privileges by leveraging the untrusted search path behavior, potentially leading to full system compromise. The CVSS v3.1 base score is 7.0, indicating high severity, with attack vector local, high attack complexity, and requiring low privileges but no user interaction. Microsoft has released an official fix to remediate this vulnerability.

An authorized local attacker can exploit this vulnerability to elevate their privileges on the affected system, potentially gaining higher-level access and control. The impact includes confidentiality, integrity, and availability being fully compromised if exploited successfully.

Microsoft has released an official fix for this vulnerability. Users and administrators should apply the provided security update from the Microsoft Security Response Center to remediate this issue. No additional mitigation steps are required beyond applying the official patch.