This vulnerability involves an integer underflow (wrap or wraparound) in the Windows NTFS file system driver on Windows 10 Version 1607 (build 10.0.14393.0). Exploitation could allow a local attacker to execute arbitrary code, potentially leading to full system compromise. The CVSS 3.1 base score is 7.8, indicating high severity with local attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. Microsoft has published an official fix to address this vulnerability.

Successful exploitation of this integer underflow vulnerability can result in local code execution with high impact on system confidentiality, integrity, and availability. This could allow an attacker to run arbitrary code on the affected system, potentially leading to full compromise.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50308 to remediate this vulnerability.