This vulnerability (CVE-2026-50471) is a heap-based buffer overflow in the Windows NTFS file system driver affecting Windows 10 Version 1607 (build 10.0.14393.0). It permits an unauthorized attacker to execute code locally, potentially leading to full system compromise. The CVSS 3.1 vector indicates local attack vector with low complexity, no privileges required, but user interaction is needed. The impact includes high confidentiality, integrity, and availability loss. Microsoft has published an official fix to address this issue.

Successful exploitation allows an unauthorized local attacker to execute arbitrary code on the affected system, potentially leading to full compromise of confidentiality, integrity, and availability of the system. The vulnerability affects Windows 10 Version 1607 and can be triggered by user interaction without requiring prior privileges.

Microsoft has released an official fix for this vulnerability. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50471 to remediate this issue.