This vulnerability, tracked as CVE-2026-50491, is an out-of-bounds read issue in the Code Integrity DLL (ci.dll) component of Microsoft Windows 10 Version 1607 (build 10.0.14393.0). It enables a local attacker with limited privileges to read memory outside the intended bounds, which can lead to elevation of privileges. The vulnerability has a CVSS 3.1 base score of 7.0, indicating high severity, with attack vector local, high attack complexity, low privileges required, and no user interaction needed. Microsoft has published an official fix for this vulnerability.

Exploitation of this vulnerability could allow an authorized local attacker to elevate their privileges on the affected system, potentially gaining higher-level access and control. The confidentiality, integrity, and availability of the system could be fully compromised as indicated by the CVSS impact metrics (C:H/I:H/A:H). There are no known exploits in the wild at the time of publication.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 (build 10.0.14393.0) as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50491. Applying this patch will remediate the vulnerability.