This vulnerability involves an integer overflow or wraparound in the Windows Spaceport.sys component of Windows 10 Version 1607 (build 10.0.14393.0). Exploitation requires physical access and can lead to privilege escalation, allowing an attacker to gain higher system privileges. Microsoft has published an official fix for this vulnerability, mitigating the risk.

Successful exploitation of this vulnerability can result in an unauthorized attacker elevating their privileges on the affected system. This can compromise system integrity and confidentiality. The attack vector requires physical access, which limits remote exploitation possibilities. There are no known exploits in the wild at the time of publication.

An official patch is available from Microsoft to remediate this vulnerability. Users and administrators should apply the update provided in the Microsoft security advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50298 to protect affected systems.