This vulnerability involves an integer overflow or wraparound condition in the Windows Storage Spaces Direct component of Microsoft Windows 10 Version 1607 (build 10.0.14393.0). Exploitation requires physical access and can lead to privilege escalation by an unauthorized attacker. The vulnerability is tracked as CWE-190. Microsoft has published an official fix to remediate this issue.

Successful exploitation of this vulnerability allows an attacker with physical access to the affected system to elevate their privileges, potentially gaining higher-level access than intended. This can compromise confidentiality, integrity, and availability of the system. The CVSS 3.1 base score is 6.8 (medium), reflecting the attack vector requiring physical access but with low attack complexity and no user interaction needed.

An official fix is available from Microsoft for this vulnerability. Users and administrators should apply the provided security update from the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49168 to remediate the issue. No additional mitigations are specified by the vendor.