This vulnerability involves a heap-based buffer overflow in the Windows USB Video Driver component of Windows 10 Version 1607 (build 10.0.14393.0). Exploitation requires physical access and user interaction, enabling an attacker to elevate privileges on the affected system. The vulnerability is tracked as CWE-122. Microsoft has published an official fix to remediate this issue.

Successful exploitation of this vulnerability could allow an attacker with physical access to the device to elevate their privileges, potentially gaining higher-level access than intended. The vulnerability affects confidentiality, integrity, and availability, all rated high in impact. However, exploitation requires physical presence and user interaction, which limits remote exploitation possibilities.

An official fix is available from Microsoft. It is recommended to apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49804 to remediate this vulnerability.