This vulnerability (CVE-2026-50367) is classified under CWE-118 (Incorrect Access of Indexable Resource) and affects Windows 10 Version 1809 (build 10.0.17763.0). It arises from improper handling of indexable resources in the Windows Sensor Data Service, leading to a range error. An authorized attacker with local access can exploit this flaw to elevate their privileges on the affected system. Microsoft has published an official fix to address this issue.

Successful exploitation allows an authorized local attacker to elevate their privileges, potentially gaining higher-level access and control over the affected Windows 10 system. The vulnerability impacts confidentiality, integrity, and availability, as indicated by the CVSS vector (C:H/I:H/A:H). There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50367 to remediate this vulnerability.