This vulnerability involves a protection mechanism failure classified under CWE-693 in the Windows Boot Manager component of Microsoft Windows 10 Version 1607 (build 10.0.14393.0). It allows a local attacker with authorized access to bypass a security feature, potentially compromising confidentiality and integrity without requiring user interaction. The vulnerability has been assigned CVE-2026-47656 and has a CVSS v3.1 base score of 7.9, indicating high severity. Microsoft has published an official fix to address this issue.

An authorized local attacker could bypass a security feature in the Windows Boot Manager, leading to a complete compromise of confidentiality and integrity of the affected system. Availability is not impacted. This could allow the attacker to gain unauthorized access or escalate privileges locally.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 (build 10.0.14393.0) as soon as possible to remediate this vulnerability. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47656 for detailed patch information and installation instructions.