This vulnerability is a heap-based buffer overflow in the Windows Media component of Microsoft Windows 10 Version 1607 (build 10.0.14393.0). It enables an unauthorized attacker to execute arbitrary code locally, potentially leading to full system compromise. The CVSS 3.1 vector indicates low attack complexity, no privileges required, but user interaction is necessary. Microsoft has released an official fix for this vulnerability, as documented in their security update guide.

Successful exploitation allows local unauthorized attackers to execute arbitrary code, resulting in complete compromise of confidentiality, integrity, and availability of the affected system. This can lead to full control over the vulnerable Windows 10 Version 1607 system.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48574 to remediate this vulnerability.