This vulnerability (CVE-2026-50397) involves a use-after-free condition in the Windows Kernel on Windows 10 Version 1607 (build 10.0.14393.0). It enables an authorized local attacker to elevate privileges, potentially gaining higher system rights. The vulnerability has been assigned a CVSS v3.1 score of 7.0, indicating high severity, with attack vector local, high attack complexity, low privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. Microsoft has published an official fix for this vulnerability as documented in their security update guide.

An authorized local attacker can exploit this use-after-free vulnerability to elevate privileges on the affected Windows 10 Version 1607 system. This could allow the attacker to execute code with higher privileges, potentially compromising system confidentiality, integrity, and availability. There are no known exploits in the wild at this time.

An official fix is available from Microsoft to remediate this vulnerability. Users and administrators should apply the security update provided by Microsoft as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50397. Applying this patch will mitigate the risk of privilege escalation via this use-after-free vulnerability.