This vulnerability is a use-after-free condition (CWE-416) in Microsoft Windows 10 Version 1607 Remote Desktop Services. It enables an attacker with authorized network access to escalate privileges on the affected system. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low complexity and no user interaction, resulting in high impact on confidentiality, integrity, and availability. Microsoft has published an official fix addressing this vulnerability.

Successful exploitation allows an authorized attacker to elevate privileges on the affected Windows 10 Version 1607 system remotely, potentially leading to full system compromise. The vulnerability impacts confidentiality, integrity, and availability at a high level.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50369 to remediate this vulnerability.