This vulnerability (CVE-2026-47653) involves a use-after-free condition in the Remote Desktop Client on Microsoft Windows 10 Version 1607 (build 10.0.14393.0). Exploitation could allow an unauthenticated attacker to execute arbitrary code remotely, potentially leading to full system compromise. The vulnerability is tracked under CWE-416. Microsoft has published an official fix to remediate this issue, as detailed in their security advisory.

Successful exploitation of this vulnerability could result in remote code execution with high impact on confidentiality, integrity, and availability of the affected system. An attacker could gain control over the vulnerable system without prior authentication, posing a significant security risk.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47653 to remediate this vulnerability.