This vulnerability involves an integer overflow or wraparound condition in the WPAD functionality of Windows 10 Version 1809 (build 10.0.17763.0). Exploitation requires local access with some level of authorization and can result in privilege escalation, allowing the attacker to gain higher privileges than intended. The vulnerability has been assigned CVE-2026-49800 and is tracked under CWE-190 (Integer Overflow or Wraparound). Microsoft has published an official fix to remediate this issue.

Successful exploitation of this vulnerability can lead to local privilege escalation, potentially allowing an attacker with authorized local access to gain elevated privileges. This could enable the attacker to perform actions with higher system rights, impacting confidentiality, integrity, and availability of the affected system.

An official fix is available from Microsoft. It is recommended to apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49800 to remediate this vulnerability. No additional mitigation steps are indicated by the vendor.