This vulnerability involves an incorrect type conversion or cast within the Windows Notification system in Windows 10 Version 1607 (build 10.0.14393.0). Exploitation requires local access with some privileges, and it enables privilege escalation, potentially allowing an attacker to gain higher system privileges. Microsoft has issued an official fix for this vulnerability.

Successful exploitation allows an authorized local attacker to elevate their privileges, potentially gaining full control over the affected system. The vulnerability impacts confidentiality, integrity, and availability, as indicated by the CVSS vector (C:H/I:H/A:H). There are no known exploits in the wild at this time.

An official patch is available from Microsoft to remediate this vulnerability. Users and administrators should apply the update provided in the Microsoft security advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50337 to mitigate the risk.