This vulnerability involves a heap-based buffer overflow in the Windows Resilient File System (ReFS) on Windows 10 Version 1607 (build 10.0.14393.0). An authorized local attacker could exploit this flaw to gain elevated privileges, potentially leading to full system compromise. The CVSS v3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, and no user interaction required. Microsoft has released an official fix for this vulnerability.

Successful exploitation of this vulnerability allows an authorized local attacker to elevate privileges, resulting in complete confidentiality, integrity, and availability impact on the affected system. This means the attacker could execute code with higher privileges, potentially leading to full control of the system.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 to remediate this vulnerability. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50407 for detailed update instructions.