CVE-2026-50362 is a heap-based buffer overflow vulnerability in the Windows Resilient File System (ReFS) on Windows 10 Version 1607 (build 10.0.14393.0). This vulnerability enables an unauthorized attacker to execute code locally, potentially leading to full system compromise. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity, with attack vector local, low attack complexity, no privileges required, and user interaction required. Microsoft has released an official fix for this vulnerability as documented in their security update guide.

Successful exploitation of this vulnerability allows an unauthorized local attacker to execute arbitrary code on the affected system, potentially resulting in full confidentiality, integrity, and availability compromise of the system. This can lead to complete control over the affected Windows 10 Version 1607 system.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 (build 10.0.14393.0) as soon as possible to remediate this vulnerability. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50362 for detailed update instructions.